Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

CPPM 6.2 - Creating Enforcement Profiles

This thread has been viewed 1 times
  • 1.  CPPM 6.2 - Creating Enforcement Profiles

    Posted Oct 22, 2013 03:30 PM

    I'm trying to create enforcement profiles to return radius attributes to a Cisco ASA to define the Class [25] attribute, which we use for Access Profiles on the ASA.

     

    When I create a generic radius enforcement (which is supposed to let me return any enabled radius dictionary attributes) I have no available attributes.

     

    I had previously created a similar profile to enable Radius auth to our APC ups devices which returned a radius attribute to let certain users (based on AD membership) have admin privilege. This profile seems to have been stripped of all configuration and returns an error in CPPM when I try to edit it.

     

    The radius dictionaries I need are enabled.

     

    Am I missing something obvious here or should I just open a TAC case?

     

    Thank in advance



  • 2.  RE: CPPM 6.2 - Creating Enforcement Profiles

    EMPLOYEE
    Posted Oct 22, 2013 04:17 PM

    @jenquist0766 wrote:

    I'm trying to create enforcement profiles to return radius attributes to a Cisco ASA to define the Class [25] attribute, which we use for Access Profiles on the ASA.

     

    When I create a generic radius enforcement (which is supposed to let me return any enabled radius dictionary attributes) I have no available attributes.

     

    I had previously created a similar profile to enable Radius auth to our APC ups devices which returned a radius attribute to let certain users (based on AD membership) have admin privilege. This profile seems to have been stripped of all configuration and returns an error in CPPM when I try to edit it.

     

    The radius dictionaries I need are enabled.

     

    Am I missing something obvious here or should I just open a TAC case?

     

    Thank in advance


    EDIT:  If your dictionaries are enabled, you should open a TAC case, being that no attributes are showing up.  You can also try disabling then enabling attributes.



  • 3.  RE: CPPM 6.2 - Creating Enforcement Profiles

    Posted Oct 22, 2013 04:29 PM

    Thanks for the quick response.

     

    That is what I was doing, but when I click on ANY, enabled or disabled, radius dictionary I get this.

     

    radiusDictionary.JPG

     

    radiusProfile.JPG

     



  • 4.  RE: CPPM 6.2 - Creating Enforcement Profiles

    EMPLOYEE
    Posted Oct 22, 2013 04:31 PM

    - What browser are you using?

    - It worked before, right?



  • 5.  RE: CPPM 6.2 - Creating Enforcement Profiles

    Posted Oct 22, 2013 04:32 PM

    Chrome.

     

    Yes, I have been through this with the APC units we setup.

     

    I will try IE. If thats the answer I will feel pretty bone headed.

     

    Thanks

     

     



  • 6.  RE: CPPM 6.2 - Creating Enforcement Profiles

    EMPLOYEE
    Posted Oct 22, 2013 04:33 PM
    I don't think that is the answer. We use chrome without issue, so it should not be a problem. You should open a TAC case....


  • 7.  RE: CPPM 6.2 - Creating Enforcement Profiles

    Posted Oct 22, 2013 04:35 PM

    Just tried IE and there is no change.

     

    Thanks for the input, I will open a TAC case.



  • 8.  RE: CPPM 6.2 - Creating Enforcement Profiles

    EMPLOYEE
    Posted Oct 22, 2013 04:46 PM
    What version of CPPM are you using?


  • 9.  RE: CPPM 6.2 - Creating Enforcement Profiles

    Posted Oct 22, 2013 04:52 PM

    ClearPass Policy Manager 6.2.1.55992 

     

    We upgraded from 6.0.something about 6 weeks ago.



  • 10.  RE: CPPM 6.2 - Creating Enforcement Profiles

    EMPLOYEE
    Posted Oct 22, 2013 04:55 PM
    There was a bug in one of the older versions but since you are at the latest, colin is right you should open a tac case


  • 11.  RE: CPPM 6.2 - Creating Enforcement Profiles

    EMPLOYEE
    Posted Oct 22, 2013 04:34 PM
    Make sure you use capability mode in IE