cancel
Showing results for 
Search instead for 
Did you mean: 

Show user role

Show user role

James_A
Valued Contributor
I'm trying to hook up XIQ with a ClearPass guest portal, and I can't work out how to show which user profile the station has been assigned. I have user profile assignment based on a RADIUS attribute from MAC auth (Login-LAT-Port because I still have some IdentiFi wireless), but it doesn't seem to be followed (in that I always get the captive portal). The other thing is the user profile is the same in both cases, just CWP bypass is enabled for the one that indicates the device has already authenticated, and I can't see anything in the CLI config that indicates CWP bypass. Anyway I was hoping there was some way to show the user role of a station so I can see what it's getting.

cb57a918a4614b3f8b11af9ebcb1181b.png
1 REPLY 1

James_A
Valued Contributor
I worked it out. First, show auth will show the numeric UID which is the user profile for that station. Second, I needed to create a second user profile on the same VLAN, since it seems bypass-cwp is an attribute of user-profile, not user-profile-mapping:

8a880faa49894d04bd1ce6119533583c.png
user-profile Guest-CWP qos-policy def-user-qos vlan-id 15 attribute 14
user-profile Guest qos-policy def-user-qos vlan-id 15 attribute 1
user-profile Guest bypass-cwp
GTM-P2G8KFN