CSCvz86688 - Aruba-MPSK-Passphrase Needs Encryption Support

[ISEe]

I deployed 3.3 patch 1 and 3.1 patch 8 and was expecting to see the Aruba VSA (Aruba-MPSK-Passphrase) added based on this bug marked as fixed but can't locate in either version.

With ISE patched, does it still require the workaround being behind the F5 or should the VSA be visible when looking at the RADIUS Aruba dictionary in ISE?

Thank you

[Ruben Cocheno]

@ISEe 

You still need the workaround with the F5.

[Antho_Balitrand · Accepted solution]

Hello, 

CSCvz86688 is fixed on ISE 3.1 patch 8, however you need to manually create the proper RADIUS attribute on the Aruba dictionary this way. 
It will then be sent with the proper encryption needed for it to be properly read by the AP. 

[nani_gvd]

So if I understand correctly, you don’t need the F5 irule translating the VSA?

[Antho_Balitrand]

Yes, correct. 

[nani_gvd]

Many thanks, works perfectly. 
Glad we don’t need to use the F5 iRule!