Security

 View Only
  • 1.  Trigger Reauth CoA from Guest page

    Posted Apr 20, 2021 03:10 PM

    Hi there,

    Is there a way to trigger a reauth CoA from the Guest page?
    I want to have a button "Reevaluate" that would force reauth.

    Thanks



    ------------------------------
    Ricardo Duarte
    ------------------------------


  • 2.  RE: Trigger Reauth CoA from Guest page

    Posted Apr 21, 2021 08:39 AM
    Can you define which Guest Page? You mean Clearpass or Wireless Controller?

    On Clearpass, if you want to initiate re-auth, you can do that by going to: Monitoring > Live Monitoring > Access Tracker, create a filter with Username contains <the name of the guest username> and then select the access tracker record.  Then you go to Change Status, under Radius CoA you have Reauthentication.

    ------------------------------
    Shpat
    ------------------------------



  • 3.  RE: Trigger Reauth CoA from Guest page

    Posted Apr 21, 2021 11:52 AM
    Hi,

    Thanks for your answer.
    But I'm fully aware I can do it using the Access Tracker. 

    What I want to do is:
    - User is presented a captive portal page (Guest > Pages > Web Pages)
    - That page has a button that triggers a CoA
    - User clicks the button => ClearPass sends a CoA for the device

    Thanks


    ------------------------------
    Ricardo Duarte
    ------------------------------



  • 4.  RE: Trigger Reauth CoA from Guest page

    Posted Apr 22, 2021 12:16 PM
    Yes, create a web login page configured for server-initiated with anonymous authentication. Configure a random username. Then you can key off this username in your CPPM WebAuth service with the appropriate Dynamic Authorization enforcement.

    ------------------------------
    Tim C
    ------------------------------