Dell PowerConnect W Clearpass 100 Software Auto Create MAC Auth Account (Authe - Page 11

Add MAC Account Creation attribute

Page 11 highlights

Add MAC Account Creation attribute To automatically create the new MAC authentication account, a condition expression is used within a Null attribute. This conditional expression will call internal Amigopod libraries to create the MAC authentication account based on the received Calling-Station-ID in the RADIUS Authentication Request packet. Attribute: Tmp-String-0 Value: Role creation expression (or some other descriptive string, the attribute won't be returned for authentication) Condition: Enter condition expression... Expression: return empty($user['mac_auth']) && NwaDynamicLoad('NwaCreateUser') && NwaDynamicLoad('NwaNormalizeMacAddress') && ($mac=NwaNormalizeMacAddress(GetAttr('Calling-Station-Id'))) && ((!empty($user['id']) && NwaCreateUser(array( 'creator_accept_terms'=>1, 'mac'=>$mac, 'mac_auth'=>1, 'role_id'=>5, 'visitor_name'=>$user['username'], 'mac_auth_pair'=>$user['id'], 'auto_update_account'=>1))) || (empty($user['id']) && NwaCreateUser(array( 'creator_accept_terms'=>1, 'role_id'=>5, 'mac'=>$mac, 'mac_auth'=>1, 'visitor_name'=>$user['username'], 'sponsor_name'=>$user['username'], 'modify_expire_time'=>'today 17:00', 'do_expire'=>4, 'auto_update_account'=>1))) ) && 0; Annotated Expression: return // Not already a MAC device... empty($user['mac_auth']) // Required call to load a function. && NwaDynamicLoad('NwaCreateUser') // Required call to load a function. && NwaDynamicLoad('NwaNormalizeMacAddress' // All MACs need to be normalized. && ($mac=NwaNormalizeMacAddress(GetAttr('Calling-Station-Id'))) Amigopod |Technical Note Auto Create MAC Account|11

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25

Amigopod
|Technical Note
Auto Create MAC Account
|
11
Add MAC Account Creation attribute
To automatically create the new MAC authentication account, a condition expression is used
within a Null attribute. This conditional expression will call internal Amigopod libraries to create
the MAC authentication account based on the received
Calling-Station-ID
in the RADIUS
Authentication Request packet.
Attribute
: Tmp-String-0
Value
: Role creation expression
(or some other descriptive string, the attribute won't be returned
for authentication)
Condition
:
Enter condition expression...
Expression
:
return
empty
(
$user
[
'mac_auth'
])
&&
NwaDynamicLoad
(
'NwaCreateUser'
)
&&
NwaDynamicLoad
(
'NwaNormalizeMacAddress'
)
&&
(
$mac
=
NwaNormalizeMacAddress
(
GetAttr
(
'Calling-Station-Id'
)))
&&
((
!
empty
(
$user
[
'id'
])
&&
NwaCreateUser
(
array
(
'creator_accept_terms'
=>
1
,
'mac'
=>
$mac
,
'mac_auth'
=>
1
,
'role_id'
=>
5
,
'visitor_name'
=>
$user
[
'username'
]
,
'mac_auth_pair'
=>
$user
[
'id'
]
,
'auto_update_account'
=>
1
)))
||
(
empty
(
$user
[
'id'
])
&&
NwaCreateUser
(
array
(
'creator_accept_terms'
=>
1
,
'role_id'
=>
5
,
'mac'
=>
$mac
,
'mac_auth'
=>
1
,
'visitor_name'
=>
$user
[
'username'
]
,
'sponsor_name'
=>
$user
[
'username'
]
,
'modify_expire_time'
=>
'today 17:00'
,
'do_expire'
=>
4
,
'auto_update_account'
=>
1
)))
)
&&
0
;
Annotated Expression
:
return
// Not already a MAC device...
empty
(
$user
[
'mac_auth'
])
// Required call to load a function.
&&
NwaDynamicLoad
(
'NwaCreateUser'
)
// Required call to load a function.
&&
NwaDynamicLoad
(
'NwaNormalizeMacAddress'
// All MACs need to be normalized.
&&
(
$mac
=
NwaNormalizeMacAddress
(
GetAttr
(
'Calling-Station-Id'
)))