Higher Education

Reply
This is an open group. Sign in and click the "Join Group" button to become a group member and start posting.
Highlighted
Contributor II
Posts: 140
Registered: ‎01-04-2012
ClearPass Multiple entries in the access tracker

What are the possible causes of multiple user entries on the access tracker?

 

-There is only one entry in the controller user-table

- The user only tried to connect once

- The entries are within seconds

Guru Elite
Posts: 8,335
Registered: ‎09-08-2010
Re: ClearPass Multiple entries in the access tracker
Are they apple devices? 


Thanks, 
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I
Posts: 228
Registered: ‎09-14-2011
Re: ClearPass Multiple entries in the access tracker

I see this happen with iPads and iPhones.

Scott McNeil - IT Specialist, Global Process Automation
Network+ | CWNA | ACSP | ACMP | ACMA | BREC
Contributor II
Posts: 140
Registered: ‎01-04-2012
Re: ClearPass Multiple entries in the access tracker

Yes all apple devices.

 

Macbook Pro

Mackbook Air

 

Contributor II
Posts: 66
Registered: ‎08-20-2007
Re: ClearPass Multiple entries in the access tracker

Do you have 'Profile Endpoints' checked in the Service?

We have [Aruba terminate Session] on for the profiler for any device.

Contributor II
Posts: 140
Registered: ‎01-04-2012
Re: ClearPass Multiple entries in the access tracker

Currently there is no problem reported but i want to be proactive :)

Guru Elite
Posts: 8,335
Registered: ‎09-08-2010
Re: ClearPass Multiple entries in the access tracker
There's very little explanation as to why this happens with Apple devices. Nothing to worry about though. 


Thanks, 
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 140
Registered: ‎05-12-2010
Re: ClearPass Multiple entries in the access tracker

Do you have AirGroup enabled? Those checks ap[pear in Access Tracker too.

Bruce Osborne - Wireless Engineer
ACCP
Contributor II
Posts: 140
Registered: ‎01-04-2012
Re: ClearPass Multiple entries in the access tracker

Yes i do have Airgroup enable too. Strange i tried to replicate the issue several times with iphone, ipad, macbook pro, and macbook air and clearpass show only 1 entry. Now it does not happen often but sometimes you look a user on the access tracker and have multple entries for some reason within seconds.

 

Options

It could be the client driver is aggresively sending a deauth to the AP and roaming to another AP within seconds and dauth again roam back to the AP. (This will cause the multiple entries in the access tracker because the client is indeed auth multiple times)

 

I am debugging the user in the controller and see if there is a dauth from the client or AP. I will update my findings.

 

 

Guru Elite
Posts: 8,335
Registered: ‎09-08-2010
Re: ClearPass Multiple entries in the access tracker
Also keep in mind that the AirGroup authorization requests will look
completely different and hit a different service as they're from the
controller to ClearPass, not the client to ClearPass.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: