Security

Reply
Frequent Contributor II
Posts: 478
Registered: ‎03-15-2014

Clearpass Profiler Inquiry?

I'm using HP wired Switch 802.1x and I see endpoints profiler is not profiled so I wanted to know what may be the problem I want to know if thsi configurations is right ,also what is the right enforcment should be done ?

 

Role name :Unknown Device

Role-Mapping
(Authorization:[Endpoints Repository]:Category  NOT_EXISTS   )     Unknown Device

 

Endorcment Policy

tips role equals [user auuthenticated]
tips role equals 802.1x authentication
tips role equals unknow device

 

 

 

 

 

 

Guru Elite
Posts: 7,870
Registered: ‎09-08-2010

Re: Clearpass Profiler Inquiry?

Do you have helper addresses configured on the L3s?


Thanks,
Tim

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Frequent Contributor II
Posts: 478
Registered: ‎03-15-2014

Re: Clearpass Profiler Inquiry?

so you said that I have do IP helper address pointing to clearpass IP on the Interface VLAN?

Guru Elite
Posts: 7,870
Registered: ‎09-08-2010

Re: Clearpass Profiler Inquiry?

Yes. Whichever interface is the client's DG, should have a helper address. Sometimes this is upstream of the edge switch..


Thanks,
Tim

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Frequent Contributor II
Posts: 478
Registered: ‎03-15-2014

Re: Clearpass Profiler Inquiry?

One more thing Mr tim what VLAN Enforcment should be the Action for the unknown device?

Guru Elite
Posts: 7,870
Registered: ‎09-08-2010

Re: Clearpass Profiler Inquiry?

You would want to return a dynamic ACL that only allows DHCP.


Thanks,
Tim

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Frequent Contributor II
Posts: 478
Registered: ‎03-15-2014

Re: Clearpass Profiler Inquiry?

so for HP Switch what type of enforcment type can do this?

Guru Elite
Posts: 7,870
Registered: ‎09-08-2010

Re: Clearpass Profiler Inquiry?

Moderator
Posts: 458
Registered: ‎11-09-2012

Re: Clearpass Profiler Inquiry?

damm, these TechNotes are pretty useful, shame that guy that wrote then never gets any Kudos...!!!!!......LO(very)L...... 


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: