Can IAP serve DHCP and relay DHCP requests to ClearPass for profiling purposes?

[swackhap]

Can IAP serve DHCP and relay DHCP requests to ClearPass for profiling purposes?

[Victor Fabian]

Yes

- Local DHCP will server IPs

- Centralize DHCP relay to ClearPass

[swackhap]

Right now, the SSID's IP Assignment is set to "By Virtual Controller". I don't see a way in the GUI to do DHCP relay in addition to this. Also, since all traffic would be NAT'd to the IP address of the IAP (virtual controller or specific AP?), how would the CPPM server keep track of the different devices coming from the same IP?

[Victor Fabian]

If you go to DHCP Tab on the top right hand side , there should be an option to do centralize DHCP and in there you can enter the CPPM IP address and VLAN .

Based on the mac address of the device (OUI) CPPM will do the profiling.

Not quite sure what VLAN it uses when it is Virtual Controller Assigned.

[SethFiermonti]

Not sure this will work.  The DHCP "modes" in IAPs are meant for the VPN functionality and not meant for configurations without a VPN tunnel back to a controller.  

In addition, the relay in the Centralized, L2 option, it an Alcatel option 82 mechanism and is not your typical helper address

[swackhap]

What page are you on for DHCP tab on top right hand side? I don't see it in IAP.

[SethFiermonti]

At the top, there is a "more" link with a drop down - should be in there.

[Victor Fabian]