Besides that all other steps were followed to a wrote: Instead of issuing a certificate to the RADIUS server in step 2 I chose to use Microsoft: Secured password (EAP-MSCHAP v2). Here is the link i followed (and many others just like it) to get my system setup to the point I am at now. Does anybody have an idea of what I should do next? I also see on the RADUIS server that the controller is passing info from the chromebooks but they are still not able to connect. That being said after following the rest of the steps I have gotten the Aruba controller to authenticate a MAC user name and pass manually on the Diagnostics page. I have chosen to no use certificate authentication on the RADIUS server like many of the walkthroughs on this site have shown. This is how my system is curently trying to connect:Ĭhromebook -> Aruba 105 -> Aruba Controller 3400 -> Server 2012 running NPS -> Active Directory with Chromebook MAC as name and password all in caps I hope someone here can help me out with the directions or settings that I need to get this sytem up and running. I have followed the directions in this thread and a couple of others, but am still having problems getting mac authentication to work with my external radius server.

The only exception is if you are using an open SSID, and mac auth fails, the device will remain in the Initial Role of the AAA profile. If you have layer 2 passthrough on, processing will continue. If the mac address does NOT pass authentication, processing will stop and the device will not be able to connect.

If the LDAP or radius server returns with a positive, the device will get the mac authentication role in the AAA profile. The Aruba controller will now send the mac address as a username and password to the Radius or LDAP server you defined, in the format you define. Add the mac authentication profile to the same AAA profile Add the server group you created in the first step to aaa profile Create a mac address authentication profile to match the format you have in your database and that is how Aruba will send it. Define that LDAP or Radius server in Aruba and add it to a server group. You could setup either a radius or ldap server with the username and password as the mac address.

My database for mac