We do similar to those above. We user a modified version of Packet Fence for registration of MAC devices. SecureW2 for 1x devices and freeradius for radius. We have a SSID that is specifically for being able to set up devices, both 802.1x and MAC based auth. The SSID is an open network that will redirect users to a set up page - https://msetup.its.umich.edu/
This setup page gives you two options. One for 1x devices that routes you to the SecureW2 onboarding page. The second is listed as other devices with a few examples. That redirects you to a page where it simply asks for the MAC address of the device and for you to name it. This page is authenticated so the devices are automatically registered to the user. They are also able to manage their devices (either renew or unregister) ------------------------ Walter Reynolds Network Architect Information and Technology Services University of Michigan (734) 615-9438 On Wed, May 27, 2020 at 1:20 AM Norton, Thomas (Network Operations) < [email protected]> wrote: > Hi there, > > We utilize securew2 for onboarding inline with clearpass as our NAC, and > will soon integrate securew2 as our primary CA for EAP-TLS across campus. > For all other devices that don’t support 802.1x, we utilize Mac auth and a > custom portal we built in house using the clearpass guest api for device > registration that integrates with the cppm guest database. We’re actually > building upon it to add operator logins for departmental device management. > Feel free to reach out direct, we’re very happy with both products. > > Get Outlook for iOS <https://aka.ms/o0ukef> > ------------------------------ > *From:* The EDUCAUSE Wireless Issues Community Group Listserv < > [email protected]> on behalf of Klingaman, Ryan < > [email protected]> > *Sent:* Tuesday, May 26, 2020 6:15:24 PM > *To:* [email protected] < > [email protected]> > *Subject:* [External] [WIRELESS-LAN] securew2 and all the devices that > don't support it. > > ------------------------------ > > [ EXTERNAL EMAIL: Do not click any links or open attachments unless you > know the sender and trust the content. ] > ------------------------------ > I have been a long time user of Ruckus and Cloudpath and have been looking > into Aruba and Clearpass lately. I see from this list that there are a few > colleges that use securew2 in place of something like Clearpass or > Cloudpath. > > My question is for those that use it, what is your solution for the gaming > consoles, media players, virtual assistants, etc.? > > Do you only support hardwired on those devices (if they support that > option)? > > Do you have a custom solution tied into the API of the wireless Vendor? > > Do you use two solutions such as Clearpass and Securew2? > > Thanks, > > Ryan > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > <https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ctnorton7%40LIBERTY.EDU%7C17df737419de4ab4a03408d801c3b728%7Cbaf8218eb3024465a9934a39c97251b2%7C0%7C1%7C637261287396349517&sdata=tzSuyApIhSGYdkSBU0zOQnCKDc9qPjQvbM8BNzcyjtE%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire > community list. If you want to reply only to the person who sent the > message, copy and paste their email address and forward the email reply. > Additional participation and subscription information can be found at > https://www.educause.edu/community > ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
