topic Re: ExtremeCloud IQ Pilot with external CWP in ExtremeCloud IQ

ExtremeCloud IQ Pilot with external CWP

EBILLOT — Fri, 29 Mar 2024 10:10:49 GMT

Hi,

We are setting up a hybrid ExtremCloud IQ Pilot with remote AP 305C configuration.

We want to keep our Clearpass infrastructure to manage guests.

We found a complete guide https://extremenetworks2com.sharepoint.com/sites/kcs/External/000021388/ExtremeWireless%20ClearPass%20Integration.pdf?ga=1

however it specify screens that are not present on our controler site. We need to find where we could configure attributs send from an external CWP to clear pass.

You may see on attachments :

- in documentation.png the original doc which is talking about "attributes to send" to external cwp

- in policy.png our policy config with external cwp selected

- in cwp.png our external captive portal configuration

We need to find where attribut to send have to be select.

Right now, without this configuration finalized, clearpass does not receive any radius att and service is not captured.

Please help,

Regards,

Re: ExtremeCloud IQ Pilot with external CWP

Christoph_S — Mon, 01 Apr 2024 12:48:29 GMT

Hello @EBILLOT,

Here are the steps:

Navigate to the Network Policy containing the SSID
For this SSID select Enterprise 802.1 authentication
Under "Authenticate via RADIUS Server" create a new group and point it to the external radius server
Under User Access Settings, check "Apply a different user profile to various clients and user groups."
Create new user profiles and in the Assignment rules configure radius attributes.
Push the configs to the APs.

BR,

Re: ExtremeCloud IQ Pilot with external CWP

EBILLOT — Tue, 02 Apr 2024 07:17:16 GMT

Hi,

Thanks for replying.

However we tried it but no way.

We are not trying to select user profil from attributes but to select what attributes send to CP.

With Aruba controler and AP, a guest request is like cp.png (attachment). We can see several attributes which can be used in clearpass to match services and trigger enforcements.

With Extreme AP, in web auth way, no radius attributes are send (see cp2.png).

How could we configure ExtremeWireless Pilot to choose what attributes to send to external radius server ?

BR,