cancel
Showing results for 
Search instead for 
Did you mean: 

Separation of users based on SSID

CC_
Occasional Contributor

Separation of users based on SSID

we are using SBR to authenticate users to access internet.The Wireless we are using is Aruba controller.I have query that can we create users in SBR which can connect to a particular SSID.For Example we have 2 departments say D1 & D2.I want them to authenticate via SBR.Users of D1 should connect to SSID D1 and users of D2 should connect to SSID D2.But not vice-versa.

5 REPLIES 5
Occasional Contributor

Re: Separation of users based on SSID

Depends on the attributes sent by your Aruba controller, you may include the SSID name in the Checklist in the profile / user

Contributor

Re: Separation of users based on SSID

Aruba support different nas-identifier for different ssid .So you need to define a custome rule for this 

nas-identifier for example 

 

rule 1 work only user come from nas-identifier xssid and yssid

rule 2 work only user come from nas-identifier xssid

 

if user match rule2 but try to authenticate ssid with nas-identifier yssid , could not authenticate.

 

CC_
Occasional Contributor

Re: Separation of users based on SSID

Could please tell us how we can define the custom rule for nas-identifier.

Super Contributor

Re: Separation of users based on SSID

Hi,

 

Can you get us more details on what you mean customer rule for NAS identifier?

 

Do you mean the return list attributes enabled in profile  or user level in SBR ?

 

Regards,

Kannan

Contributor

Re: Separation of users based on SSID

You can use a profile for the users with a checklist attribute of NAS-Identifier = <ssid>

 

Through the Administrator GUI, just go to "Profiles" and Select "Add,"

 

This will bring up the Add Profile window.  Under the "Check List" tab select Add, then choose the NAS-Identifier attribute from the Attributes list and enter the SSID name in the String field.  Click Add, then close this window.  Give the profile a name, and click OK.

 

Repeat this process for each of the SSIDs you need to restrict.

 

When you have the profiles created, you can set the profile for the specific user through the authentication method you are using.

 

Hope this helps,

 

Jon