Higher Education

Reply
This is an open group. Sign in and click the "Join Group" button to become a group member and start posting.
Highlighted
Occasional Contributor I
Posts: 11
Registered: ‎12-01-2010
Clearpass Problem

Hello all,

 

Can all of you share problem after deploy Aruba Clearpass at your enviroment (education enviroment),I need a information from you all if there have similar problem at my place,so if have same problem,so you all can share the solution with me.Thank You.

MVP
Posts: 500
Registered: ‎04-03-2007
Re: Clearpass Problem

You refer to "similar problem". What problem are you having?

==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Occasional Contributor I
Posts: 11
Registered: ‎12-01-2010
Re: Clearpass Problem

Thank you for your concern,

 

I have problem after deploy clearpass at my place,here I list the problem:

 

1. Already connected to onboard ssid,but no landing page (onboard page ) appear.Sometime it can be direct but sometime failed to direct to right landing page.

 

2. User need to do the onboard authentication step 2 time (first time failed),after do the second time,the user can connected to the internet.

 

3. Error to the radius.Here I attach the error at our place.

 

Hope you have a solution of my problem,we already contact the Aruba support but still not solve the problem. I have no idea how to solve the problem,we already do the troubleshoot but the problem still occur.

Aruba
Posts: 1,542
Registered: ‎06-12-2012
Re: Clearpass Problem

#1 Make sure you have a TAC case open.

 

#2 Is this a VM or hardware, and the Size of the CPPM? Is there a cluster? How many Users/Devices auth?

#3 What Wired and wireless vendors and firmware are you using?

 

#4 see below inline.

-----------------------------

noorsyazwan wrote:

Thank you for your concern,

 

I have problem after deploy clearpass at my place,here I list the problem:

 

1. Already connected to onboard ssid,but no landing page (onboard page ) appear.Sometime it can be direct but sometime failed to direct to right landing page.

 

Troy: Are you seeing this on one type of device or on all types (IOS, Windows, MAC, ETC) If its IOS are you using the CNA bypass?

 

2. User need to do the onboard authentication step 2 time (first time failed),after do the second time,the user can connected to the internet.

 

Troy: Is this a constant issue or just once in a while? What is the processor load on the system? Is this production or lab?

 

3. Error to the radius.Here I attach the error at our place.

 

Troy: Are the users local or remote. What is the ping between the device and CPPM.  Also what is access tracker showing when the user auths?

 

Hope you have a solution of my problem,we already contact the Aruba support but still not solve the problem. I have no idea how to solve the problem,we already do the troubleshoot but the problem still occur.


Without looking at the system. My first guess would be a connectivity issues between the device and CPPM.

 

All the issues you are listing rely on a strong conection and low latency. I would try to running a few auth test between the NAS devices and CPPM. Double check the clocks on the NAS devices, AD, and CPPM.  Try doing a wired test to see if you have the same issue.

 

This is just a small list of things to test and there are many more but I would start with one issue, Run packet captures and ping test and work from there.

 

 

 

 

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Occasional Contributor I
Posts: 11
Registered: ‎12-01-2010
Re: Clearpass Problem

1. Already connected to onboard ssid,but no landing page (onboard page ) appear.Sometime it can be direct but sometime failed to direct to right landing page.

 

Troy: Are you seeing this on one type of device or on all types (IOS, Windows, MAC, ETC) If its IOS are you using the CNA bypass?

 

Wan: Effect at laptop (windows & mac),mobile device don't have a problem

 

2. User need to do the onboard authentication step 2 time (first time failed),after do the second time,the user can connected to the internet.

 

Troy: Is this a constant issue or just once in a while? What is the processor load on the system? Is this production or lab?

 

Wan: Sometime,I mean from 10 device it will effect 7-8 device,load of cppm server is CPU: 4% and Mem Util: 26%.Production enviroment.Whole campus.

 

3. Error to the radius.Here I attach the error at our place.

 

Troy: Are the users local or remote. What is the ping between the device and CPPM.  Also what is access tracker showing when the user auths?

 

Wan: It local user. We not allow our user ping our server.So we cannot ping when the user already connected.Error at the access tracker show "bind as user failed"

 

Hope I answer some of your question.

Aruba
Posts: 1,542
Registered: ‎06-12-2012
Re: Clearpass Problem
What version of CPPM?

What wireless vendor are you using?

Do you have Airwave?
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Occasional Contributor I
Posts: 11
Registered: ‎12-01-2010
Re: Clearpass Problem

What version of CPPM?

6.1.4

What wireless vendor are you using?
Aruba


Do you have Airwave? Thank You,
 Yes

 

Thank You

Syazwan

Aruba
Posts: 1,542
Registered: ‎06-12-2012
Re: Clearpass Problem
The first thing you need to do is have TAC dig into the bind issue. You need to find out if its a user issue or a thread issue.

Are you see this during a high activity time or all the time.
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: