Security

Reply
MVP

CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

Hi Everyone, I'm testing CPPM with Aruba wireless 802.1X, have a windows client connected to the IAP and I was checking the Access Tracker Logs and found out that every minute the PC is doing an authentication, is this normal? I'm using Active Directory as the Authentication source and EAP-PEAP

Oscar,
“All opinions written here are my own and do not necessarily reflect the views and opinions of Aruba.”
“If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos"

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

Hi,

 

have a look to the reauth interval value ?

 

reauth.png

ACMP, ACCP, BCNE
MVP

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

Yes Is setup at 0 hrs, the same as your picutre, the weird thing is that 3 more devices are connected to the SSID and only the windows PC is reauthenticating every minute.

Oscar,
“All opinions written here are my own and do not necessarily reflect the views and opinions of Aruba.”
“If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos"

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

Ok, those other devices are hitting the same dot1x service ?
Is it in the same role ? 

Please share IAP config + Switch port


ACMP, ACCP, BCNE
MVP

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

Yes, they're using unrestricted Access because they authentication with Clearpass and Active directory. The siwtchport is in trunk mode on the switch.  

Oscar,
“All opinions written here are my own and do not necessarily reflect the views and opinions of Aruba.”
“If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos"

Guru Elite

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute


Ozk@r wrote:

Yes, they're using unrestricted Access because they authentication with Clearpass and Active directory. The siwtchport is in trunk mode on the switch.  


Try turning off Authentication Survivability.  Also turn off accounting.  Is there a reason why accounting is every minute?

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
MVP

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute


cjoseph wrote:

Ozk@r wrote:

Yes, they're using unrestricted Access because they authentication with Clearpass and Active directory. The siwtchport is in trunk mode on the switch.  


Try turning off Authentication Survivability.  Also turn off accounting.  Is there a reason why accounting is every minute?


Hi Joseph, I use a tutorial video on Youtube, that's why I configured 1 minute in the Accounting interval, is there a best practice on the amount of minutes? 

Oscar,
“All opinions written here are my own and do not necessarily reflect the views and opinions of Aruba.”
“If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos"

Guru Elite

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

I don't think that is a best practice.  You are sending accounting information to a radius server for all of your clients every minute.  What is your goal?

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Guru Elite

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

I don't think that is a best practice.  You are sending accounting information to a radius server for all of your clients every minute.  What is your goal?

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
MVP

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute


cjoseph wrote:

I don't think that is a best practice.  You are sending accounting information to a radius server for all of your clients every minute.  What is your goal?


I'm really new to CPPM, as I undestand accounting give CPPM session reports on the authenticate devices correct?, can this be disable on the IAP?. 

Oscar,
“All opinions written here are my own and do not necessarily reflect the views and opinions of Aruba.”
“If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos"

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: