Security

Reply
New Contributor
Posts: 4
Registered: ‎08-05-2013

End point profiling doesn't work on Clear pass

Hi All,

We are  configuring Aruba clearpass for Mac bypass authentication for ip phones, but this doesnt work because the end point respository shows the phones as not profiled. In the network switch we have configured ip helper address as aruba clear pass and required radius parameters are provided for MAB authentication. 

 

To my understanding  DHCP should act as a collector and automatically profile the ip phones , let me know if any parameters need to be specified.

should we have dhcp snooping or snmp configured for profiling to work correctly?

 

I have read through docs but unable to get a proper answer.

 

 

Request inputs.

 

MVP
Posts: 4,238
Registered: ‎07-20-2011

Re: End point profiling doesn't work on Clear pass

You need set the IP address of your clearpass server as one of ip helper address on that SVI.

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
New Contributor
Posts: 4
Registered: ‎08-05-2013

Re: End point profiling doesn't work on Clear pass

We have configured clearpass ip address as the ip helper address, but the end point respository shows not profiled.

Do we need to configure anything specific on clearpass  as well for getting the devices profiled.

We are using 6.0 version.

MVP
Posts: 4,238
Registered: ‎07-20-2011

Re: End point profiling doesn't work on Clear pass

Do you see anything in the endpoint profiler ?:

 

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 4,238
Registered: ‎07-20-2011

Re: End point profiling doesn't work on Clear pass

[ Edited ]

 

Also make sure you have it enabled 

ClearPass Policy Manager - Aruba Networks_2013-08-06_07-18-43.png

ClearPass Policy Manager - Aruba Networks_2013-08-06_07-18-14.png

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 498
Registered: ‎04-03-2007

Re: End point profiling doesn't work on Clear pass

Also ensure udp 67 (both src and dst ports) are allowed to clearpass.
==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Search Airheads
Showing results for 
Search instead for 
Did you mean: