07-19-13 Expert Day

Reply
Occasional Contributor I
Posts: 7
Registered: ‎01-12-2012

ClearPass Reporting Aruba-AP-Group and ESSID

We have 5 x ClearPass Guest servers. As a company we have multiple brands and brand outlets, and we provide dedicated ClearPass server to each brand, for example;

 

Brand H running on dedicated ClearPass server 1 running Radius for brand H

Brand G running on dedicated ClearPass server 2 running Radius for brand G

 

On the controllers we have a separate VAP/SSID/AAA/Server groups dedicated to each brand, we have a radius server entry to point to the IP of the dedicated ClearPass radius server for that brand.

 

However when we run reports on usage from the dedicated ClearPass server by including the fields

 

Aruba-AP-Group

Aruba-Essid-Name

 

We often get a entries from the other Aruba-AP-Group and ESSID. I can see how this could happen if we associated the wrong brand AAA server to a VAP, but these have been checked as good.

 

Can you suggest any other reason how this can happen and what else to check.

 

Aruba-AP-Group              Aruba-Essid-Name

H1234                                    HHHH_Guest

G4654                                   GGGG_Guest

H5687                                    HHHH_Guest

G5757                                   GGGG_Guest

H1333                                    HHHH_Guest

H5335                                    HHHH_Guest

H9837                                    HHHH_Guest

H8239                                    HHHH_Guest

 

 

Aruba Employee
Posts: 5
Registered: ‎11-06-2009

Re: ClearPass Reporting Aruba-AP-Group and ESSID

Hi Richard,

 

From the content, I understand you are running Insight separately for each servers. Please confirm this.

 

Also, are the servers in a cluster or are they running individually.

 

Regards,

John

 

Occasional Contributor I
Posts: 7
Registered: ‎01-12-2012

Re: ClearPass Reporting Aruba-AP-Group and ESSID

Hi,

 

I'm not familiar with insight? We are running dedciated non-clustered ClearPass (previously Amigopods) Guest Appliances with reports generated by the integrated Report Manager plugin. Our 3200 controllers are in master/local configuration supporting all brands units.

 

Thanks,

 

Richard

 

 

Aruba Employee
Posts: 5
Registered: ‎11-06-2009

Re: ClearPass Reporting Aruba-AP-Group and ESSID

Richard,

 

Can you confirm how frequent this happens.

 

In this situation, we need to find how the information are coming to the servers from the controller.

 

We have to enable the Radius Debug on the server and leave it for sometime. Then, we take view the System logs to see how and what data is coming to one server which is not supposed to.

 

I would recommend you to open a TAC for further troubleshooting on this issue.

 

 

Regards,

John

 

Occasional Contributor I
Posts: 7
Registered: ‎01-12-2012

Re: ClearPass Reporting Aruba-AP-Group and ESSID

Thanks for the quick response.

 

I run regular reports (monthly/weekly) on guest wifi for brand/location/user usage, etc. As a test I just ran one report from one of the CP servers for this week, we have 13000 valid entries, with 13 entries reporting incorrectly, entries that I would expect to see recorded against the other CP servers.

 

cheers,

 

Richard 

Aruba Employee
Posts: 5
Registered: ‎11-06-2009

Re: ClearPass Reporting Aruba-AP-Group and ESSID

Thanks Richard for the explanation.

 

If you can open a TAC case, we can enable the debug and check the logs for more information as to why this is happening.

 

 

Regards,

John

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: