We found the mac address was only appended if the controller actually did the redirect. If the users went directly to the captive portal page (as all our documentation says to do) the mac address was not there and caused confusion. We frontend clearpass with a load balancer. We added an option to call out to the InfoBlox API to resolve the IP to mac address from the DHCP lease and then we stuff the mac address into the url. That has worked every time for us.
Patrick From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]> on behalf of Tim Cappalli <[email protected]> Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]> Date: Tuesday, August 25, 2020 at 2:31 PM To: "[email protected]" <[email protected]> Subject: Re: [WIRELESS-LAN] Aruba Captive Portals and Login Pages The MAC address is appended to the redirect URL (login-page) as the query parameter “mac” on all Aruba platforms automatically. tim From: Higgins, Benjamin J<mailto:[email protected]> Sent: Tuesday, August 25, 2020 14:30 To: [email protected]<mailto:[email protected]> Subject: [WIRELESS-LAN] Aruba Captive Portals and Login Pages Words from the trenches: Anyone here know if you can pass the MAC Address to ClearPass when using a “login-page” in an “aaa authentication captive-portal”? If so, how would you do it. Appreciated! --ben -- Benjamin J. Higgins (‘97) | [email protected] Manager of Network Operations | Office 508.831.4860 Worcester Polytechnic Institute | Cell 508.713.1739 ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam06.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fwww.educause.edu-252Fcommunity-26data-3D02-257C01-257Ctim.cappalli-2540MICROSOFT.COM-257C9dde7ac5c78744a1d68408d84924e8f2-257C72f988bf86f141af91ab2d7cd011db47-257C1-257C0-257C637339770164524147-26sdata-3Djm-252FoWX-252B-252Fp5mHWUwD9Mw-252FNvfAAqTIGIzFfMBe5wsNnEA-253D-26reserved-3D0&d=DwMF-g&c=WO-RGvefibhHBZq3fL85hQ&r=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM&m=dbxLHKy_dJyorAY2UaiFGkj7JEbIHwA0rPz0Mr1FTdk&s=7-XLRibqDQcc2OO_yU73pKyb2lCSqf21F8J2lZ9w0r8&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_community&d=DwMF-g&c=WO-RGvefibhHBZq3fL85hQ&r=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM&m=dbxLHKy_dJyorAY2UaiFGkj7JEbIHwA0rPz0Mr1FTdk&s=nCH79dRj6_Ph9a9CxfrzNXHTF4eRKXBXn8VM8ClvPkc&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
