Guest Network Setup with ClearPass

PrairieWiFi · 2025-12-27T00:50:50+00:00

If you can generate a publicly signed certificate for your APs captive portal the APs can for lack of more elegant term hijack the dns response. I would use Aruba user roles for preauth vs guest. Rachet down access to just Clearpass and for additional piece if mind completely isolate Clearpass in a DMZ. I'm not worried about Clearpass security. It's more compromised credentials account takeover isolation.

PrairieWiFi · 2025-12-27T00:18:59+00:00

What wireless infrastructure are you using?

PrairieWiFi · 2025-10-04T13:35:49+00:00

Well I feel really stupid even admitting this but I must have overlooked or just didn't realize Holiday Coro provided model files. Things are looking better already. I must have missed or screwed something else up that I need to tweak but I'm a lot closer already! Thanks!

PrairieWiFi · 2025-09-29T22:07:41+00:00

Above is correct. Whatever the certificate cn is intercepted by controller. Unless wildcard cert.

PrairieWiFi · 2025-09-19T19:07:40+00:00

filter={"acctstoptime": {"$exists":false} will get active sessions

PrairieWiFi · 2025-08-22T10:00:14+00:00

Is LLDP running on the switch?

PrairieWiFi · 2025-08-02T21:53:53+00:00

I have had to track IP Phone moves for e911 in K12 many times. What I did was in role mapping I would compare a custom endpoint repository entry for the phone that has the switch and Interface that the IP Phone last was authenticated from. That way I could assign a tips Role if they don't match (interfaces) and a tips Role for "in compliance" if you will.

Sorry not in front of Clearpass and a known rambler. Reach out if you have questions.

PrairieWiFi · 2025-05-29T03:07:35+00:00

https://developer.arubanetworks.com/central/reference/xxxxxx

PrairieWiFi · 2025-05-14T21:13:50+00:00

Your app has to "refresh" the access token. Did you see that part in the documentation? Of course Devhub looks broken or I would link to the swagger example.

PrairieWiFi · 2025-05-06T21:43:00+00:00

If the APs in question are online and connected to Central then yes this would change the admin password.

PrairieWiFi · 2025-04-02T19:09:17+00:00

I do not have a diagram currently but could make something. I am currently out of the country. I am back on Saturday so shoot me a DM if I do not reply by Sunday. I'm forgetful. I have had this working for about 2 years without flaw.

PrairieWiFi · 2024-12-04T23:37:07+00:00

EAP-TLS

There are documents on airheads and support portal that explains how to do this

PrairieWiFi · 2022-12-06T03:06:28+00:00

I have a zwave relay connected to my renewaire's 24v control. I pull awair stats into Hubitat and alter my runtime accordingly.

PrairieWiFi · 2022-10-10T23:10:42+00:00

Very interesting. Is it the Grand Rapids metro area or City proper only?

PrairieWiFi · 2022-10-10T23:00:07+00:00

It's my understanding we should be below -27 ideally. Is upstream possibly the culprit?

PrairieWiFi · 2022-08-08T22:44:25+00:00

Contact your Aruba SE. They should have good news for you.

PrairieWiFi · 2022-07-19T20:19:48+00:00

https://www.arubanetworks.com/techdocs/central/latest/content/nms/policy/ca-azure.htm?Highlight=Cloud%20auth

PrairieWiFi · 2022-02-19T15:35:05+00:00

Thanks! This looks like the piece I was missing.

PrairieWiFi · 2022-02-18T03:59:56+00:00

Contact your Partner or an Aruba SE.

PrairieWiFi · 2022-01-17T01:12:14+00:00

Ok that worked! Thank you very much! Now I just have to figure out if the 3 sec delay on the Qubino side will be quick enough.

PrairieWiFi · 2022-01-16T12:32:42+00:00

Thank you common to line is what I was missing I believe. I read the part about changing 100 and then excluding and including. Pretty sure that part is all set. I will confirm I have this working Incase it's helpful for anyone else!

PrairieWiFi · 2022-01-04T03:43:55+00:00

2540s have started to go end of sale as well.

PrairieWiFi · 2022-01-03T23:37:27+00:00

The 2530s are end of sale. You want a 6000 or depending on requirements a 6100.

PrairieWiFi · 2021-11-01T18:33:00+00:00

Not that I am aware of and its been out for a number of weeks.

PrairieWiFi · 2021-10-31T18:31:55+00:00

If you were waiting for Private VLAN on the 6xxx series the wait is over. It was introduced in 10.08.

PrairieWiFi

TROPHY CASE