Security

Reply
al
Occasional Contributor I
Posts: 6
Registered: ‎09-28-2014

Clearpass: Online Status Data Filter Not Working

[ Edited ]

I am running CPM 6.4.1.6.

 

I want to create a filter under Analysis and Trending that shows the Online Status Data of online or offline. 

 

This is the field I am referring to under Request Details for Access Tracker

Online Status.PNG

 

 

 

This is a simple Data Filter I made to test that does an OR on the two fields I beleive refer to "Online Status".

 

Online-Offline Filter.PNG

 

 

The issue is I am not returning any results. 

 

 

Thanks for any feedback.

Guru Elite
Posts: 21,029
Registered: ‎03-29-2007

Re: Clearpass: Online Status Data Filter Not Working

The "online" status is tied to radius accounting.  Do you have your NAS sending radius accounting information in your environment to ClearPass?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

al
Occasional Contributor I
Posts: 6
Registered: ‎09-28-2014

Re: Clearpass: Online Status Data Filter Not Working

Thanks Joe. Yes, I can see differentiation between offline/online/disabled in access tracker.

 

I checked out the radius accounting as you suggested and thought I found it, but still not working.

 

 

When I inspect the element it looks like using "contains" offline/online should work.

Radius Offline-Online Status.PNG

 

The field I am looking in under Radius Accounting is "Acct-Status-Type"

Online-Offline Rule.PNG

MVP
Posts: 4,271
Registered: ‎07-20-2011

Re: Clearpass: Online Status Data Filter Not Working

Do you have this enabled ?

2014-12-01 10_49_51-ClearPass Policy Manager - Aruba Networks.png

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
al
Occasional Contributor I
Posts: 6
Registered: ‎09-28-2014

Re: Clearpass: Online Status Data Filter Not Working

[ Edited ]

Yes, i do.

Am I searching the correct field now?

"RADIUS Acct-Status-Type"

Guru Elite
Posts: 8,460
Registered: ‎09-08-2010

Re: Clearpass: Online Status Data Filter Not Working

That is not the built-in Status you are seeing. That is a RADIUS attribute. I'm not sure you can currently do what you are trying.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
al
Occasional Contributor I
Posts: 6
Registered: ‎09-28-2014

Re: Clearpass: Online Status Data Filter Not Working

I find it odd that it's an informational field and I can't filter by it?

 

Guru Elite
Posts: 8,460
Registered: ‎09-08-2010

Re: Clearpass: Online Status Data Filter Not Working

It's not the field you are looking for. The online status is a ClearPass calculated field. The one you are seeing is an IETF RADIUS attribute.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
al
Occasional Contributor I
Posts: 6
Registered: ‎09-28-2014

Re: Clearpass: Online Status Data Filter Not Working

Understood thanks, if i can not filter by the calculated field is there another attribute that I can filter by that would accomplish my end goal?

Moderator
Posts: 488
Registered: ‎11-09-2012

Re: Clearpass: Online Status Data Filter Not Working

Endpoint Online status is computed from InsightDb and the query is as follows:

SELECT end_time IS null AS online FROM radius_acct WHERE calling_station_id='%{Connection:Client-Mac-Address-NoDelim}' ORDER BY updated_at DESC LIMIT 1;";


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: