Nafish, thank you for the awesome video. One follow-up question. If I don’t want to use eap-peap for the pre-auth how can I do this? Is it possible? But also verify that the user is an employee.
You can use what so called dual SSID onboarding so first they’ll connect to and open ssid pretty much like guest then once onboarded they can use the secure one
Naditha, let me say that Aruba should hire you to replace Herman, you are a much better instructor. I have watched and rewatched your videos. Thank you, thank you, thank you. I had one question that is perplexing me regarding the captive portal and the controller. I am trying to configure Onboard to resolve an Android OS device authentication issue. I followed your steps but got stuck because we have a mobility conductor in front of two clustered wireless controllers. When I go to an individual controller to set the Authentication, and choose the L3 tab, the profile does not appear. I do however see it in L2? Should I manually create it?
First of all many thanks for your kind comments and much appreciated 😀. in terms of the L3 authentication can you send me a screenshot. use my email nafithsalama@gmail.com
@@wagudo3 agree 💯 percent. Nothing against Herman but I noticed he misses some key points audience needs understand in order to to learn. I like this video is very informative and explains key points of why you doing it. Great job! 👏
Nafish, thanks for this video! I'm at 23m:21s in the video and the "BYOD-Provision" role was not pushed to my MCr. Do you have any common reasons this may have happened? Is there some pre-provisioning that you'd done between your ClearPass and MCr previously that got CP and MCr ready to communicate (ie... ClearPass pushing BYOD-Provision"). Thank you!
When any Aruba-User-Role is sent back from a RADIUS (ClearPass in this case). that is a firewall role in Aruba. this role has to exist in Aruba Controller. it is also case sensitive. so what you need to do you need to create that Role.
Hi, First I want to thank you for your videos! they are really helping me to understand the CPPM and all Aruba echo system! I want to ask you a question, I have a guest wifi in a remote location with self registration. but they way it is configurest is that the DHCP and the DNS server are a DMZ and I do not have password for it, and there is no documinatation. once a guest is registerd he assignd an IP and the DNS is the DMZ server but the user is not able to go online, it show security error and I think that is because the server time is incorrect or somthing like that, but as I said, I do not have access to the server. I tried to use diffrent DHCP, but then once the user recive and IP it take him to CPPM page and the FQDN cannot be resolved. so my questin to you is if it posible to use IP insted of FQDN for the guest registration and login page? and if yes how to do it? and another one is how whuld you approach this problem? thanks alot!
Hi @lxdgr3t. Most likely the security error is a certificate issue. this means the ClearPass is most likely using its self-signed certificate. The guest page is located on ClearPass guest. If you try to look into the web address of the guest page it might look like securelogin.yourdomain.com (yourdomain.com is whatever the FQDN you use). Can you use an IP address the answer is yes but this will not resolve your issue i believe. Let me know if you need to know more details
Nafish, thank you for the awesome video. One follow-up question. If I don’t want to use eap-peap for the pre-auth how can I do this? Is it possible? But also verify that the user is an employee.
You can use what so called dual SSID onboarding so first they’ll connect to and open ssid pretty much like guest then once onboarded they can use the secure one
@@nafithsalama first let me apologize for not spelling your name correctly but that auto-type. Thank you for your reply
Naditha, let me say that Aruba should hire you to replace Herman, you are a much better instructor. I have watched and rewatched your videos. Thank you, thank you, thank you.
I had one question that is perplexing me regarding the captive portal and the controller. I am trying to configure Onboard to resolve an Android OS device authentication issue. I followed your steps but got stuck because we have a mobility conductor in front of two clustered wireless controllers. When I go to an individual controller to set the Authentication, and choose the L3 tab, the profile does not appear. I do however see it in L2? Should I manually create it?
First of all many thanks for your kind comments and much appreciated 😀. in terms of the L3 authentication can you send me a screenshot. use my email nafithsalama@gmail.com
@@wagudo3 agree 💯 percent. Nothing against Herman but I noticed he misses some key points audience needs understand in order to to learn. I like this video is very informative and explains key points of why you doing it. Great job! 👏
Nafish, thanks for this video! I'm at 23m:21s in the video and the "BYOD-Provision" role was not pushed to my MCr. Do you have any common reasons this may have happened? Is there some pre-provisioning that you'd done between your ClearPass and MCr previously that got CP and MCr ready to communicate (ie... ClearPass pushing BYOD-Provision"). Thank you!
When any Aruba-User-Role is sent back from a RADIUS (ClearPass in this case). that is a firewall role in Aruba. this role has to exist in Aruba Controller. it is also case sensitive. so what you need to do you need to create that Role.
Hi,
First I want to thank you for your videos! they are really helping me to understand the CPPM and all Aruba echo system!
I want to ask you a question,
I have a guest wifi in a remote location with self registration.
but they way it is configurest is that the DHCP and the DNS server are a DMZ and I do not have password for it, and there is no documinatation.
once a guest is registerd he assignd an IP and the DNS is the DMZ server but the user is not able to go online, it show security error and I think that is because the server time is incorrect or somthing like that, but as I said, I do not have access to the server.
I tried to use diffrent DHCP, but then once the user recive and IP it take him to CPPM page and the FQDN cannot be resolved.
so my questin to you is if it posible to use IP insted of FQDN for the guest registration and login page? and if yes how to do it?
and another one is how whuld you approach this problem?
thanks alot!
Hi @lxdgr3t. Most likely the security error is a certificate issue. this means the ClearPass is most likely using its self-signed certificate. The guest page is located on ClearPass guest. If you try to look into the web address of the guest page it might look like securelogin.yourdomain.com (yourdomain.com is whatever the FQDN you use). Can you use an IP address the answer is yes but this will not resolve your issue i believe. Let me know if you need to know more details
Hey
Am trying to connect quick connect but getting error, am able to connect through BYOD any solution ?
why didn't the captive portal pop up automatically ?
Most likely it is to do with the version of the OS you're onboarding
Also, where did you get the captive portal config from?
Do you mean where to configure captive portal in ClearPass? if that is the question then you go to the guest section
Send me your email so i can send you a screenshot