- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
11-09-2015 07:28 PM
Hi,
We brought a new CPPM server online in one of our remote offices and joined it to the existing cluster.
Since then I have been having some strange issues with the Endpoints DB.
I have one endpoint in particular that keeps switching between being profiled and not profiled.
It seems that after a successful machine authentication, it is profiled, the next time it performs machine authentication, it then becomes not profiled. I am not doing anything that would change this status in the enforcement profiles.
Has anyone seen this behavior before?
On a side note, for the IP helper addresses that we configure to help with DHCP finger printing, should we be targetting the publisher? Or the subscriber in each remote location?
Thank you,
Cheers
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: CPPM Endpoint profiled then not profiled
Re: CPPM Endpoint profiled then not profiled
11-09-2015 07:46 PM
You should have all the CPPMs IP address as DHCP relays
Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: CPPM Endpoint profiled then not profiled
Re: CPPM Endpoint profiled then not profiled
11-09-2015 07:55 PM
So for each subnet we should configure each CPPM as a dhcp relay in every location? I didn't know that!
Thank you. I will configure that in the morning.
As for the verison. We are running 6.5.4.76733 across all 3 CPPM servers.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: CPPM Endpoint profiled then not profiled
Re: CPPM Endpoint profiled then not profiled
11-10-2015 05:50 AM
What is the reason for listing all servers as helpers? Redundancy or some other advantage in doing it?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: CPPM Endpoint profiled then not profiled
Re: CPPM Endpoint profiled then not profiled
11-10-2015 05:53 AM
Honestly, you should only need to point to a single CPPM instance with profiler running.
Colin Joseph
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: CPPM Endpoint profiled then not profiled
Re: CPPM Endpoint profiled then not profiled
11-10-2015 06:15 AM
What would be the best CPPM to point the IP helper address to?
I was thinking that the issue with endpoint becoming unprofiled was because the Subscriber was learning the finger print and profiling the device and when the publisher did the sync it was overwriting it. But perhaps that is not the case.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: CPPM Endpoint profiled then not profiled
Re: CPPM Endpoint profiled then not profiled
11-10-2015 06:19 AM
The server that has the following enabled:
Colin Joseph
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
11-10-2015 07:52 AM
I have confirmed that all three of the CPPM servers in the cluster have this feature enabled.
Is there anything else that could cause this behavior?
Is the process of profiling logged by the CPPM somewhere that I could maybe look at?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: CPPM Endpoint profiled then not profiled
Re: CPPM Endpoint profiled then not profiled
12-26-2015 02:27 AM
no direct experience with this issue, but if you don't want to involve TAC (which could also be route of course) then you could try turning it off on two of them do determine if that perhaps helps.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator