Security

Reply
Contributor II

Clearpass Change endpoint from portal

Hi!

 

I´m trying to make a portal from wich users can register a device to the endpoint database and set a custom attribute I´ve created for devicetype.

 

Similar to this but from a clearpass page: http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-delete-modify-an-endpoint-attribute-using-tips-API/ta-p/246004

 

I understand how to create endpoint attributes but not how to make a portal for my purpose.

 

I´ve been looking at mactrac forms and messing around with them a bit. I gather that I will have to create somekind of custom field to be able to write changes to the endpoint database.

 

The usage scenario is to selfregister devices and / or change the devicetype to get another type of network access for some users.

Daniel F
ACMP | ACCP | HP ATP - FlexNetwork Solutions
Guru Elite

Re: Clearpass Change endpoint from portal

The device registration portal is designed for end user access and can be completely customized. The endpoints database in policy manager isn’t really designed for registration-like functionality.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II

Re: Clearpass Change endpoint from portal

Ok, so I cannot do this using the endpoint repository ?

Can I achieve the same results using the device database ? As in make some devicecatogaries and other custom values for devices and change those from a portal ?

Daniel F
ACMP | ACCP | HP ATP - FlexNetwork Solutions
Highlighted
Guru Elite

Re: Clearpass Change endpoint from portal

You could use the endpoint database, but it’s not recommended as it’s an administrative database, not an user facing database.

The device registration portal is meant for end users and IT staff to “register” headless-type devices. You can have as many custom attributes as you want along with role, expiration, etc.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II

Re: Clearpass Change endpoint from portal

Ok, sounds like I should use the device registration portal. Got any good documentation on how to achieve what I´m talking about ?

Daniel F
ACMP | ACCP | HP ATP - FlexNetwork Solutions
Guru Elite

Re: Clearpass Change endpoint from portal

It’s something I’m working on but nothing to share quite yet. Please work with your Aruba ClearPass partner.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II

Re: Clearpass Change endpoint from portal

ok, I will check with them. Thanks for your answer.

Daniel F
ACMP | ACCP | HP ATP - FlexNetwork Solutions
Contributor II

Re: Clearpass Change endpoint from portal

oh , one last thing. Devices doesnt use guest licenses correct ?

Daniel F
ACMP | ACCP | HP ATP - FlexNetwork Solutions
Guru Elite

Re: Clearpass Change endpoint from portal

Correct. No guest licenses are consumed for device registration.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: