Cisco C9800 WLC and Aruba ClearPass

 9800 WLC and Aruba ClearPass 

 

Configure 9800 WLC Integration with Aruba ClearPass - Dot1x 

 

Configure 9800 WLC and Aruba ClearPass - Guest Access 

 

 

Configure 9800 WLC Integration with Aruba ClearPass - Dot1x & FlexConnect for Branches Deployment

 

From <https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217935-configure-9800-wlc-integration-with-arub.html> 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

aaa group server radius AAA_CPPM_Corp

 server name CPPM_Corp

 ip radius source-interface GigabitEthernet1

 deadtime 5

 mac-delimiter colon

 

 

 

 

 

 

 

Test

 

-------------------------------------------------------------------------------------------------------------------

-------------------------------------------------------------------------------------------------------------------

 

 

Configure 9800 WLC and Aruba ClearPass - Guest Access & FlexConnect

 

From <https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217931-configure-9800-wlc-and-aruba-clearpass.html> 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

CAPTIVE_PORTAL_REDIRECT

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Click any endpoint

 

 

Cisco_WLC_Guest_COA

 

 

 

 

 

 

 

 

Cisco_Portal_Redirect

 

 

 

url-redirect-acl=CAPTIVE_PORTAL_REDIRECT

url-redirect=https://10.8.25.157/guest/iaccpet.php?cmd-login&mac=%{Connection:Client-Mac-Address-Hyphen}&switchip=%{Radius:IETF:NAS-IP-Address}

 

 

Make-Cisco-Guest-Valid

 

 

 

 

 

 

 

 

 

 

 

Services: GuestPortal-MAC Auth

 

 

 

 

 

 

 

 

 

 

 

 

Service: Guest

 

 

 

 

 

 

 

 

 

 

 

 

 

 

<<GuestManager Accounts 2024-01-07.csv>>

 

 

 

 

 

 

 

 

 

 

 

 

 

username | Username

visitor_name | Visitor Name

cn | Visitor Name

visitor_phone | Visitor Phone

email | Email

mail | Email

sponsor_name | Sponsor Name

sponsor_email | Sponsor Email

Allow-Guest-Internet | true

 

 

 

Import user

 

 

 

 

 

 

Verify