Security

Reply
Highlighted
MVP
Posts: 4,309
Registered: ‎07-20-2011

ClearPass Tips and Tricks : AirWave Diagnostic Link

Wouldn't you like to troubleshoot a wireless device in AirWave directly from ClearPass Access Tracker ?

 

ClearPass - 6.4.4.x

AirWave - 8.0.6.1

 

- First add Airwave as a EndPoint Context Server

 

2015-02-04 17_37_33-ClearPass Policy Manager - Aruba Networks.png

 

- Go to Access Tracker and select one of the authentication request entries

 

2015-02-04 17_46_02-Document1 - Microsoft Word.png

 

- You should be able to see to see the Open In AirWave link which should take to the Diagnostic Page in Airwave if the client is connected and if the client is no longer connected it will take you to the Client Detail page

2015-02-04 17_46_51-Document1 - Microsoft Word.png

 

Diagnostic Page

2015-02-04 17_49_40-AMP-SERVER.png

 

Hope you guys find this helpful

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor I
Posts: 9
Registered: ‎05-29-2017

Re: ClearPass Tips and Tricks : AirWave Diagnostic Link

Hello,

 

After clicking on "Open in Airwave", I am rediracted to the page and logged in as admin but I get the following error message "Access Denied. You don`t have permission to view this object."

Do you maybe know what is the reason?

 

Best Regards,

 

Naida

 

Aruba Employee
Posts: 513
Registered: ‎02-19-2015

Re: ClearPass Tips and Tricks : AirWave Diagnostic Link

Hi,

 

Could you share the screen shot, does the Airwave user credentials which you have provided in CPPM have full admin right?

 

When you directly login with those credentials in to Airwave, does it throwing same error message?

 

Have you checked the validate server certificate box?

 

Regards

Pavan

Occasional Contributor I
Posts: 9
Registered: ‎05-29-2017

Re: ClearPass Tips and Tricks : AirWave Diagnostic Link

Hi Pavan,

 

Thanks for the quick reply. I have attached the screenshots.

 

I do not get this error message when I log in directly with these credentials.

 

Yes, I have checked it. 

 

Best Regards,

 

Naida

Aruba Employee
Posts: 513
Registered: ‎02-19-2015

Re: ClearPass Tips and Tricks : AirWave Diagnostic Link

Hi Naida,

 

When you click on Ariwave link in access tracker, does that client which you are looking at is present in Airwave database? Could you manually search with username/mac addresses in Airwave and check?

 

Could you compare the URLs which its redirecting when you click in access tracker and manually login.

 

Regards,

Pavan

 

Occasional Contributor I
Posts: 9
Registered: ‎05-29-2017

Re: ClearPass Tips and Tricks : AirWave Diagnostic Link

For example, MAC address 30-8d-99-c0-84-7b is present in the Access tracker but not in the Airwave client list. 

I have checked for 2 different MAC addresses and the same situation, they are present in CP Access Tracker but not in Airwave client list.

 

The redirect URL: https://(OUR IP ADDRESS)/client_monitoring?mac=94:57:A5:C0:23:C2

 

The manual URL: https://(OUR IP ADDRESS)/client_all

 

I have tried manually this The manual URL: https://(OUR IP ADDRESS)/client_monitoring and I get the same error message as when redirected from CPPM.

Occasional Contributor I
Posts: 9
Registered: ‎05-29-2017

Re: ClearPass Tips and Tricks : AirWave Diagnostic Link

I made a mistake when typing, I tried this: https://(OUR IP ADDRESS)/client_monitoring and got the same error message as when redirected. :)

Aruba Employee
Posts: 513
Registered: ‎02-19-2015

Re: ClearPass Tips and Tricks : AirWave Diagnostic Link

Hi,

 

When we manually login and navigate to client detail page it will take us to

https://<IP>/client_monitoring?mac=24:77:03:C4:3D:18

 

It looks page redirection URL link is correct, it is taking you to client detail page.

 

Try search mac in this format 94:57:A5:C0:23:C2 not 30-8d-99-c0-84-7b

 

ALE.PNG

 

In Airwave right top, selet highlighted option and search MAC if client not listed in Airwave then its expected behaviour.

 

Regards,

Pavan

Occasional Contributor I
Posts: 9
Registered: ‎05-29-2017

Re: ClearPass Tips and Tricks : AirWave Diagnostic Link

Hi Pavan,

 

I tried searching for various MAC addresses from CPPM Acess Tracker and cannot find any of them in the client list. 

 

Do you maybe know why?

 

Best Regards,

 

Naida

Aruba Employee
Posts: 513
Registered: ‎02-19-2015

Re: ClearPass Tips and Tricks : AirWave Diagnostic Link

Naida,

 

Does the client listed in access tracker is latest? Airwave retain the client information based on retention value we set in AMP Setup > Genreal > Historcial Retetnion setting.

 

If client is older than retention value then we no longer see in Airwave it might got purged during nighlty maintainence.

 

Client session is latest but not listed in Airwave then either NAD device which client is associated is not added in Airwave or client details are not getting updated in Airwave.

 

Regards,

Pavan

If my post addresses your query give kudos:)

Search Airheads
Showing results for 
Search instead for 
Did you mean: