Security

Reply
New Contributor

Help! IP Pooling Cisco Anyconnect CPPM

Hi Airheads,


First of all i'm quite new to the community and new to Aruba related products.
We started off in december with a WiFi pilot with the current setup:
Controller 7210 (version: 6.4.2.2)
AirWave
CPPM (version: 6.4.2.68288)

Together with our 3rd party network team we're trying to do all authentication for our switches and vpn via CPPM. The authentication part was easy to setup, however we are also trying to setup assigning IP address via CPPM. Is this possible? What would be to best way to achieve this?
Client > AnyConnect > CPPM (Authentication + IP) > AnyConnect > Client

Thanks in advance

Alex

Guru Elite

Re: Help! IP Pooling Cisco Anyconnect CPPM

Where would you be setting the IP assignment? From a database, not DHCP?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor

Re: Help! IP Pooling Cisco Anyconnect CPPM

Hi 

 

I'm trying to see which options i have, DHCP server, Database, Controller etc.. Any way is fine, just need to know how i assign the ip in CPPM

Guru Elite

Re: Help! IP Pooling Cisco Anyconnect CPPM

The answer is really going to depend on what you want to do. Do you want static addressing or DHCP?

If you're going to use a DHCP server, ClearPass would not be involved.

If you're using Active Directory, IP addresses can be assigned for each user and ClearPass can send the IP back via a RADIUS VSA.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor

Re: Help! IP Pooling Cisco Anyconnect CPPM

Thanks, saw in 1 of your replies in a other thread a detailed explanation. (http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Cisco-ASA-VPN-Returning-IETF-Framed-IP-Address/m-p/219170#M16973)

Thanks for all the quick replies!


cappalli wrote:
The answer is really going to depend on what you want to do. Do you want static addressing or DHCP?

If you're going to use a DHCP server, ClearPass would not be involved.

If you're using Active Directory, IP addresses can be assigned for each user and ClearPass can send the IP back via a RADIUS VSA.

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: