Security

Reply
Contributor I
Posts: 28
Registered: ‎12-15-2016

CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

[ Edited ]

Hi Everyone, I'm testing CPPM with Aruba wireless 802.1X, have a windows client connected to the IAP and I was checking the Access Tracker Logs and found out that every minute the PC is doing an authentication, is this normal? I'm using Active Directory as the Authentication source and EAP-PEAP

MVP
Posts: 118
Registered: ‎07-13-2015

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

Hi,

 

have a look to the reauth interval value ?

 

reauth.png

ACMP, ACCP, BCNE
Contributor I
Posts: 28
Registered: ‎12-15-2016

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

Yes Is setup at 0 hrs, the same as your picutre, the weird thing is that 3 more devices are connected to the SSID and only the windows PC is reauthenticating every minute.

MVP
Posts: 118
Registered: ‎07-13-2015

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

Ok, those other devices are hitting the same dot1x service ?
Is it in the same role ? 

Please share IAP config + Switch port


ACMP, ACCP, BCNE
Contributor I
Posts: 28
Registered: ‎12-15-2016

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

[ Edited ]

Yes, they're using unrestricted Access because they authentication with Clearpass and Active directory. The siwtchport is in trunk mode on the switch.  

Guru Elite
Posts: 20,600
Registered: ‎03-29-2007

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute


Ozk@r wrote:

Yes, they're using unrestricted Access because they authentication with Clearpass and Active directory. The siwtchport is in trunk mode on the switch.  


Try turning off Authentication Survivability.  Also turn off accounting.  Is there a reason why accounting is every minute?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor I
Posts: 28
Registered: ‎12-15-2016

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute


cjoseph wrote:

Ozk@r wrote:

Yes, they're using unrestricted Access because they authentication with Clearpass and Active directory. The siwtchport is in trunk mode on the switch.  


Try turning off Authentication Survivability.  Also turn off accounting.  Is there a reason why accounting is every minute?


Hi Joseph, I use a tutorial video on Youtube, that's why I configured 1 minute in the Accounting interval, is there a best practice on the amount of minutes? 

Guru Elite
Posts: 20,600
Registered: ‎03-29-2007

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

I don't think that is a best practice.  You are sending accounting information to a radius server for all of your clients every minute.  What is your goal?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 20,600
Registered: ‎03-29-2007

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute

I don't think that is a best practice.  You are sending accounting information to a radius server for all of your clients every minute.  What is your goal?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor I
Posts: 28
Registered: ‎12-15-2016

Re: CPPM 6.6 Access Tracker(Login Status) is refreshing every minute


cjoseph wrote:

I don't think that is a best practice.  You are sending accounting information to a radius server for all of your clients every minute.  What is your goal?


I'm really new to CPPM, as I undestand accounting give CPPM session reports on the authenticate devices correct?, can this be disable on the IAP?. 

Search Airheads
Showing results for 
Search instead for 
Did you mean: