07-19-2013 08:09 AM
We have 5 x ClearPass Guest servers. As a company we have multiple brands and brand outlets, and we provide dedicated ClearPass server to each brand, for example;
Brand H running on dedicated ClearPass server 1 running Radius for brand H
Brand G running on dedicated ClearPass server 2 running Radius for brand G
On the controllers we have a separate VAP/SSID/AAA/Server groups dedicated to each brand, we have a radius server entry to point to the IP of the dedicated ClearPass radius server for that brand.
However when we run reports on usage from the dedicated ClearPass server by including the fields
We often get a entries from the other Aruba-AP-Group and ESSID. I can see how this could happen if we associated the wrong brand AAA server to a VAP, but these have been checked as good.
Can you suggest any other reason how this can happen and what else to check.
07-19-2013 08:17 AM
From the content, I understand you are running Insight separately for each servers. Please confirm this.
Also, are the servers in a cluster or are they running individually.
07-19-2013 08:25 AM
I'm not familiar with insight? We are running dedciated non-clustered ClearPass (previously Amigopods) Guest Appliances with reports generated by the integrated Report Manager plugin. Our 3200 controllers are in master/local configuration supporting all brands units.
07-19-2013 08:41 AM
Can you confirm how frequent this happens.
In this situation, we need to find how the information are coming to the servers from the controller.
We have to enable the Radius Debug on the server and leave it for sometime. Then, we take view the System logs to see how and what data is coming to one server which is not supposed to.
I would recommend you to open a TAC for further troubleshooting on this issue.
07-19-2013 09:07 AM
Thanks for the quick response.
I run regular reports (monthly/weekly) on guest wifi for brand/location/user usage, etc. As a test I just ran one report from one of the CP servers for this week, we have 13000 valid entries, with 13 entries reporting incorrectly, entries that I would expect to see recorded against the other CP servers.
07-19-2013 09:29 AM
Thanks Richard for the explanation.
If you can open a TAC case, we can enable the debug and check the logs for more information as to why this is happening.