Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
blog:aruba-mpsk-freeradius [2020/03/01 12:22] v0tti [Using Aruba MPSK with FreeRADIUS] |
blog:aruba-mpsk-freeradius [2024/02/08 10:31] (current) v0tti |
||
---|---|---|---|
Line 5: | Line 5: | ||
==== Configure the SSID ==== | ==== Configure the SSID ==== | ||
- | From the WebUI, create a new SSID with MPSK authentication. It is not possible to select an existing RADIUS server, just create a new dummy server. Now, edit the SSID profile and now change the dummy server to your (previously configured) FreeRADIUS server | + | From the WebUI, create a new SSID with MPSK authentication. It is not possible to select an existing RADIUS server, just create a new dummy server. Now, edit the SSID profile and now change the dummy server to your (previously configured) FreeRADIUS server. |
==== Configure the FreeRADIUS Server ==== | ==== Configure the FreeRADIUS Server ==== | ||
- | When a client connects the controller will send a RADIUS request to the server. In the response you have to include the vendor-specific attribute '' | + | When a client connects the controller will send a RADIUS request to the server. In the response you have to include the vendor-specific attribute '' |
If you operate a proxying RADIUS, like we do, your config could look like this: | If you operate a proxying RADIUS, like we do, your config could look like this: | ||
Line 23: | Line 23: | ||
==== Some Notes ==== | ==== Some Notes ==== | ||
Using MPSK without Clearpass is not officially supported and TAC probably won't help if any problem occurs. The controller will cache the password for a period of time (seems to be a couple of hours). | Using MPSK without Clearpass is not officially supported and TAC probably won't help if any problem occurs. The controller will cache the password for a period of time (seems to be a couple of hours). | ||
+ | |||
+ | Most of the work explained here was done by [[https:// | ||
---- | ---- |