Hi,
I think you can usce CLI enforcement for any vendor.
You can define the vendor specific ssh port as shown in the first post.
With a cli based enforcement profile, you can send back one cli command per line with the "Command" attribute.
I used it to configure a client device type related interface name to aruba-os based switches or to push specific POE settings to the NAS port.
In my opinion this should work for any device or vendor which is supporting ssh based console connections.
You have to pay attention to the logon timeout.
In case of aruba-os switches, you have to send one enter (my why to resolve this, was to send a hash key before "conf t" and other commands).
May you have longer timeouts with other products, in this case you can send more then one enter (hash per line) to address this.
But, I don't know if this is supported for another vendors beside meru.
This should be answeared by an aruba representative...
------------------------------
Best regards, mom
------------------------------
Original Message:
Sent: Apr 14, 2020 09:34 PM
From: Neil Bhave
Subject: CLI Enforcement on ClearPass 6.3.0
Hey - I wanted to check if there's been any update to the CLI enforcement profile feature for more vendors? Would someone be able to list which Cisco devices this is usable for? Thanks!