Wireless Access

 View Only
  • 1.  RADIUS Called-Station-ID app-macaddr - Returning incorrect AP MAC

    Posted Sep 01, 2023 11:56 AM

    We have our RADIUS server configured in Aruba for 802.1x authentication. It works fine, however, we need Aruba to send the AP MAC address back to the RADIUS server to apply a specific policy. We set the Called-Station-ID CSID_type value to ap-maccaddr but the MAC address that is returned is not correct. It does not match the AP's MAC Address. The first three octets match, but not the last three. 

    The MAC address that is returned to our RADIUS server does not match any other AP in our system. Any ideas?



    ------------------------------
    Nathan K
    ------------------------------


  • 2.  RE: RADIUS Called-Station-ID app-macaddr - Returning incorrect AP MAC

    Posted Sep 02, 2023 10:52 AM

    The "called Station ID" should be the BSSID (the mac address of the SSID that the client is attached to), NOT the wired mac address of the AP.



    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
    ------------------------------



  • 3.  RE: RADIUS Called-Station-ID app-macaddr - Returning incorrect AP MAC

    Posted Sep 03, 2023 08:54 AM

    Hi Colin,

    Are you sure? These are the options we're presented with in the RADIUS server profile:



    ------------------------------
    Nathan K
    ------------------------------



  • 4.  RE: RADIUS Called-Station-ID app-macaddr - Returning incorrect AP MAC

    Posted Sep 03, 2023 09:17 AM
    Edited by cjoseph Sep 03, 2023 09:37 AM

    As usual, I read your first post too quickly.   When using the options above ap-macaddr should use the AP wired mac address, yes.  If it is not working that way, you should open a TAC case to find out what is wrong.

    EDIT:  the macaddr parameter should send the BSSID.



    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
    ------------------------------