Maximum number of authentication sources added to a service in ClearPass

MVP
MVP
Q:

What is the maximum number of authentication sources that can be added to a service in ClearPass?



A:

ClearPass Policy Manager supports a maximum of 23 authentication sources per service. This limit however is not currently enforced by UI.

Configuring more than 23 Authentication Sources in a service will stop the RADIUS Service.

Solution is to remove some authentication sources so the number of Authentication servers count is equal or less than 23 and start the RADIUS Service manually using the below command via appadmin access:
 

 

Or from WebUI of ClearPass Server:

 

Administration » Server Manager » Server Configuration » Click on CPPM Server » Click on Service Control tab » Hit "Start" next to "Radius Server" to start the RADIUS Service


 

Note: Having too many authentication sources is not recommended as this will impact the RADIUS authentication processing time especially if the user is present in an authentication source down in the list (as of 6.5.5).

Version history
Revision #:
2 of 2
Last update:
‎02-15-2016 03:12 AM
Updated by:
 
Labels (1)
Contributors
Comments
Vsalmon
Hi, Is there a way to increase this limit? Or a workaround posible? (I saw that now you just can't add more than 23 as an error message appear, so the service doesn't stop..) Because a customer need more than 23 authentication sources, as the clearpass get 30+ lists of mac-address for different vlans... I understand this limit when you have external radius server, but just checking in your own static hosts list (almost all in regex) shoulnd't be so bad for your performances...( or at least, far less than 23 Active directory servers..).. so... just asking ;-)
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: