Aruba Instant & Cloud Wi-Fi

Reply
Occasional Contributor I
Posts: 5
Registered: ‎02-27-2013

Authentication survavility


I know authentication survivability only works with Clearpass. I tried with NPS and it doesn't work. But I would like to know why only work with Clearpass. Is it due to certificate?. Something more than Radius standard?.
Thanks in advance
Guru Elite
Posts: 20,366
Registered: ‎03-29-2007

Re: Authentication survavility


muwatalli wrote:

I know authentication survivability only works with Clearpass. I tried with NPS and it doesn't work. But I would like to know why only work with Clearpass. Is it due to certificate?. Something more than Radius standard?.
Thanks in advance

This is only available between IAP and Clearpass.  There is a special exchange between IAP and clearpass that gives IAP the ability to authenticate a user when the ClearPass is no longer available.  NPS does not have this exchange.  It is not a radius standard.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 5
Registered: ‎02-27-2013

Re: Authentication survavility

thanks a lot

 

i was very surprise, becouse doing some tests i realize when clearpass was not available, IAP sends other certificate to clients and then it is able to connect. Same bevahivor with NSP, but in this case Client can't connect. So, i thought relationship between IAP and Clearpass is more than just RADIUS standars.

 

do you have more details about this relationship?

Guru Elite
Posts: 20,366
Registered: ‎03-29-2007

Re: Authentication survavility


muwatalli wrote:

thanks a lot

 

i was very surprise, becouse doing some tests i realize when clearpass was not available, IAP sends other certificate to clients and then it is able to connect. Same bevahivor with NSP, but in this case Client can't connect. So, i thought relationship between IAP and Clearpass is more than just RADIUS standars.

 

do you have more details about this relationship?


The user guide here:  http://support.arubanetworks.com/DOCUMENTATION/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=12480 explains authentication survivability in detail.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 5
Registered: ‎02-27-2013

Re: Authentication survavility

Thanks a lot cjoseph;

I knew the user guide, but not too much information into de doc. Maybe one page.

My question was more about what king on info in shared between IAP and Clearpass to support survavility because standard Radius protocol doesn't support this funcionality.
Guru Elite
Posts: 20,366
Registered: ‎03-29-2007

Re: Authentication survavility

Anything that has to do with passwords I am sure only the functionality will be described in public documentation. If you have any other Questions, you should ask your Aruba sales team.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Aruba
Posts: 1,283
Registered: ‎08-29-2007

Re: Authentication survavility

Does a certificate need to be uploaded to the Instants for this to work in the event of a loss of connection with Clearpass?


If my post is helpful please give kudos, or mark as solved if it answers your post.

ACCP, ACMP, ACMX #294
mclarke@arubanetworks.com
Aruba Employee
Posts: 38
Registered: ‎03-20-2013

Re: Authentication survavility

Michael, Instant has a default certificate which would be used for this purpose. You could also upload a certificate.

 

 

Thank you,

Regards,

Vijay Rajasimhan | Principal Network Engineer
Customer Advocacy | Aruba Networks

Did something you read in the Community solve a problem for you? If so, click "Accept as Solution" in the bottom right hand corner of the post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: