Security

Reply
Occasional Contributor II
Posts: 13
Registered: ‎07-23-2014

Clarpass with more than one network

Hi Guys, 

 

I have two separeted management networks that are not routed and I need to use Claerpass to manage each one from the same server. Is it possible to use two NIC in the same Claerpass server to manage these networks?

If so, I need to create two services, one for itt network?

 

Thank you.

 

Leandro Menezes

Guru Elite
Posts: 8,765
Registered: ‎09-08-2010

Re: Clarpass with more than one network

No this is not possible.



You can create GRE and IPSec tunnels from other network equipment to
ClearPass. You can also explore the use of VRFs on your network gear.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: Clarpass with more than one network

You can use the VLAN option on the MGMT interface. Keep in mind that ESXi does not have the notion of dual-mode or tagged and untagged on the same virtual port. Also, you will need to create routes if the networks are L3 networks. Not sure how far the functionality goes because I have not tried it yet. But I did have a partner that was using the VLAN tagging option for multiple networks on the MGMT interface.

 

Screen Shot 2015-06-16 at 1.44.42 PM.png

Thanks,

Zach Jennings
MVP
Posts: 1,414
Registered: ‎11-30-2011

Re: Clarpass with more than one network

am i not understanding the question right or can't you use the data port for the one network and the mgmt port for the other network. there even is the services routing technote about this. sure it isn't advised, but it is possible.

 

you don't need different services, but you can have them. just check on something like the NAS IP to differentiate between the two networks.

Search Airheads
Showing results for 
Search instead for 
Did you mean: