AAA, NAC, Guest Access & BYOD

Introduction : This article talks about Restricting Guest users Access to Clear Pass Application.

Environment : This applies to CPPM 6.2 and above

Configuration Steps :

Login to CPPM and navigate to "Administration » Server Manager » Server Configuration"

Goto the Network tab and click on "Restrict Access"




We can restrict access to all/one/combinations of Applications present.





We can input the guest network's subnet to deny application access to the guest users.

In my case, the Guest network is 192.168.20.0 /24.







NOTE: We MUST NEVER add the Management Subnet of CPPM as we can lock the WEBUI.