Security

Reply
Contributor II
Posts: 44
Registered: ‎04-06-2011

CPPM Endpoint Static IP value

We are running CPPM / Guest 6.2.6.  All of our endpoints have the "Static IP" value = TRUE.  This isn't the case because all of our clients are actually DHCP.  How does this value get set?

From what I understand, having this value set to TRUE may be preventing the endpoints from being cleaned up.  In CPPM 6.3 & 6.4 is there any improvement to the Endpoint cleanup / management?



Thanks,
Bryan

Guru Elite
Posts: 8,466
Registered: ‎09-08-2010

Re: CPPM Endpoint Static IP value

Do you have a DHCP relay pointed to your ClearPass servers on your user subnets?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: CPPM Endpoint Static IP value

[ Edited ]
- Head to Administration > Server Manager > Server Config > Cluster-Wide Parameters.  There is a tab for Cleanup Intervals.
 
- Known endpoints cleanup interval:   A value (in days) that ClearPass uses to determine when to start deleting known or disabled entries from the Endpoint repository. Known entries are deleted based on their last "Updated At" value for each Endpoint. For example, if this value is 7, then known Endpoints that do not have an "Updated At" value within the last 7 days will be deleted.
 
- Unknown endpoints cleanup interval:  A value (in days) that ClearPass uses to determine when to start deleting unknown entries from the Endpoint repository. Unknown entries are deleted based on their last "Updated At" value for each Endpoint. For example, if this value is 7, then unknown Endpoints that do not have an "Updated At" value within the last 7 days (perhaps stale endpoints) will be deleted.
 
- Screenshot attached.PastedGraphic-3.tiff
Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Contributor II
Posts: 44
Registered: ‎04-06-2011

Re: CPPM Endpoint Static IP value

No, we only have ip helpers pointing to our DHCP servers.  Does CPPM need to hear requests for DHCP for some reason?

 

 

Guru Elite
Posts: 8,466
Registered: ‎09-08-2010

Re: CPPM Endpoint Static IP value

Yes, this is the main method that ClearPass uses to profile.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: