I'm trying to hook up XIQ with a ClearPass guest portal, and I can't work out how to show which user profile the station has been assigned. I have user profile assignment based on a RADIUS attribute from MAC auth (Login-LAT-Port because I still have some IdentiFi wireless), but it doesn't seem to be followed (in that I always get the captive portal). The other thing is the user profile is the same in both cases, just CWP bypass is enabled for the one that indicates the device has already authenticated, and I can't see anything in the CLI config that indicates CWP bypass. Anyway I was hoping there was some way to show the user role of a station so I can see what it's getting.
I worked it out. First,
user-profile Guest-CWP qos-policy def-user-qos vlan-id 15 attribute 14
user-profile Guest qos-policy def-user-qos vlan-id 15 attribute 1
user-profile Guest bypass-cwp
show auth will show the numeric UID which is the user profile for that station. Second, I needed to create a second user profile on the same VLAN, since it seems bypass-cwp is an attribute of user-profile, not user-profile-mapping:user-profile Guest-CWP qos-policy def-user-qos vlan-id 15 attribute 14
user-profile Guest qos-policy def-user-qos vlan-id 15 attribute 1
user-profile Guest bypass-cwp
