Hi Craig, AirGroups can function with CPPM I think two primarily ways (that I know of).
1. Location-based, which is just what it sounds like. I don’t remember the exact boundary definition of the location (e.g. single AP, or group, etc) but it’s based on where the things are. 2. User-based, with ClearPass you can enable user-based Airgroups, this does require the users register devices while authenticated via 802.1X-secured network with something identifying the user (vs just the machine). Hope that helps! -jj ___________ Jennifer Minella, CISSP, HP MASE VP of Engineering & Security Carolina Advanced Digital, Inc. www.cadinc.com<http://www.cadinc.com/> j...@cadinc.com<mailto:j...@cadinc.com> 919.460.1313 Main Office 919.539.2726 Mobile/text [CAD LOGO EMAIL SIG] From: Yahya M. Jaber <yahya.ja...@kaust.edu.sa> Sent: Thursday, March 5, 2020 12:11 AM Subject: Re: Device visibility in Aruba AirGroup + ClearPass Hi, We were in similar position to provide home like access to the students here. The way to solve this was to use Cisco 1815 series AP’s as OEAP, this will give the user an option to access the AP GUI and create his own SSID “and other options” while still being managed by the WLC “having the campus SSID’s also”. We have looked into many vendors, only Cisco provides this functionality. https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-3/b_Cisco_OfficeExtend_Access_Point_/b_Cisco_OfficeExtend_Access_Point__chapter_01100.html Yahya Jaber. Sr. Wireless Engineer IT Network & Communications – Engineering Building 14, Level 3, Rm 308-WS07 KAUST 23955-6900 Thuwal, KSA Email yahya.ja...@kaust.edu.sa<mailto:yahya.ja...@kaust.edu.sa> Office +966 (0) 12 8081237 Mobile +966 (0) 558697555 On Call Rotation Mobile: +966 54 470 1177 From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Craig D Rice Sent: Wednesday, March 4, 2020 18:19 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass We are an Aruba shop and are evaluating AirGroup + ClearPass to provide students a more home-like experience in their residence halls. That is, we would like students to be able to register and see only their registered devices. If a user registers a device in ClearPass, is that device visible to non-registered devices (or devices registered to another user) -- even if the devices are associated with the same AP? We have received conflicting answers from our Aruba SEs, account exec, and TAC, so we are hoping to learn how to limit device visibility from others who are using ClearPass. Thanks for your advice! Craig -- Craig D. Rice Director of Enterprise Infrastructure | IT [Image removed by sender. St. Olaf College] Office: +1-507-786-3631 1510 St. Olaf Avenue Northfield, MN 55057-1097 USA stolaf.edu <http://stolaf.edu/> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
