Security

Reply
Occasional Contributor II

ClearPass w/ Microsoft NPS as Radius

Just a quick question. Is it possible to use Microsoft NPS as the main method of radius authentication instead of using ClearPass Radius?

Guru Elite

Re: ClearPass w/ Microsoft NPS as Radius

Yes, but ClearPass is much more powerful than NPS and provides a ton of additional policy controls. 

NPS does not scale well and only offers basic yes/no access. 

Sent from Nine

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II

Re: ClearPass w/ Microsoft NPS as Radius

Thanks for the quick reply @cappalli. Is there a way to load balance the radius with CPPM? I work at a school, so our CPPM server gets hammered with authentications at the beginning of every class. So we would like to ease the load if possible. I know there's a clustering option which we are looking at. But I think that requires additional licensing?

Guru Elite

Re: ClearPass w/ Microsoft NPS as Radius

If you already have ClearPass, you don't want to go back to NPS.

 

How many ClearPass servers do you have? You can load balance across multiple ClearPass servers using RADIUS server load balancing on the controller.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II

Re: ClearPass w/ Microsoft NPS as Radius

We have one VM 5K CPPM server. We do want to cluster and load balance across 2 CPPM servers with the load balancing from the controller. We would need an additional license to do this?

Guru Elite

Re: ClearPass w/ Microsoft NPS as Radius

Yes, in order to load balance, you would need another CP-VA-5K.

 

Did you have a scaling and design discussion wtih your ClearPass partner?

 


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II

Re: ClearPass w/ Microsoft NPS as Radius

Thanks for the reply. Yes we are looking at this option of adding another 5k vm.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: