Security

Reply
Frequent Contributor I
Posts: 83
Registered: ‎04-05-2011

Airgroup Generating LOTS of log entries

I am working towards enabling the airgroup features in clearpass, but i am running into 1 last hurdle.  When i enable the RFC server on the contoller(see attachment named "controller") it starts to genrate TONS of log entries in access tracker on clearpass(see attachment named "CP Access tracker")

 

Is this normal to have that many log entries?  I dont like it because it makes it harder to find the actual 802.1x entries when i am tring to groubleshoot stuff.  For a scale reference, the controller reports that it generaly does about 100,000 authentications per day.  With Aigroup enabled it did about 500,000 which just seems super excessive.

Guru Elite
Posts: 20,011
Registered: ‎03-29-2007

Re: Airgroup Generating LOTS of log entries

mwallen,

 

What version of ArubaOS are you running?

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Frequent Contributor I
Posts: 83
Registered: ‎04-05-2011

Re: Airgroup Generating LOTS of log entries

I am running AOS 6.4.1.0 and Clearpass 6.4.0.66263

Guru Elite
Posts: 20,011
Registered: ‎03-29-2007

Re: Airgroup Generating LOTS of log entries

[ Edited ]

mwallen,

 

There is a potential fix in the upcoming ArubaOS 6.4.2.3 release for the Airgroup issue you are witnessing.

 

This has been addressed in 6.3.1.13.  The bug number is 106505 in the release notes below:

http://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=15375

 

 

"Symptom: A Controller used to send multiple authentication requests for AirGroup users to CPPM server when it did not receive a response from the CPPM server. This issue is resolved with internal code changes.

Scenario: This issue was not limited to a specific controller model or ArubaOS release version. Platform: All platforms.

Reported Version: ArubaOS 6.4.2.0."

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Frequent Contributor I
Posts: 83
Registered: ‎04-05-2011

Re: Airgroup Generating LOTS of log entries

Awesome, Thanks agian!  

 

Now the million dollar question(which you probably are not allowed to  answer) is there a hopeful release date for 6.4.2.3?  I thought i had heard it was sometime this month but that was a few weeks ago.  

Guru Elite
Posts: 20,011
Registered: ‎03-29-2007

Re: Airgroup Generating LOTS of log entries

mwallen,

 

The best answer is "sooner rather than later".  I am not sure.

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Guru Elite
Posts: 7,854
Registered: ‎09-08-2010

Re: Airgroup Generating LOTS of log entries

For now you can create a data filter view that hides the AirGroup Authorization messages.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Search Airheads
Showing results for 
Search instead for 
Did you mean: