Security

Reply

End point profiling doesn't work on Clear pass

Hi All,

We are  configuring Aruba clearpass for Mac bypass authentication for ip phones, but this doesnt work because the end point respository shows the phones as not profiled. In the network switch we have configured ip helper address as aruba clear pass and required radius parameters are provided for MAB authentication. 

 

To my understanding  DHCP should act as a collector and automatically profile the ip phones , let me know if any parameters need to be specified.

should we have dhcp snooping or snmp configured for profiling to work correctly?

 

I have read through docs but unable to get a proper answer.

 

 

Request inputs.

 

Re: End point profiling doesn't work on Clear pass

You need set the IP address of your clearpass server as one of ip helper address on that SVI.

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA

Re: End point profiling doesn't work on Clear pass

We have configured clearpass ip address as the ip helper address, but the end point respository shows not profiled.

Do we need to configure anything specific on clearpass  as well for getting the devices profiled.

We are using 6.0 version.

Re: End point profiling doesn't work on Clear pass

Do you see anything in the endpoint profiler ?:

 

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA

Re: End point profiling doesn't work on Clear pass

 

Also make sure you have it enabled 

ClearPass Policy Manager - Aruba Networks_2013-08-06_07-18-43.png

ClearPass Policy Manager - Aruba Networks_2013-08-06_07-18-14.png

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP

Re: End point profiling doesn't work on Clear pass

Also ensure udp 67 (both src and dst ports) are allowed to clearpass.
==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: