Security

Reply
New Contributor
Posts: 4
Registered: ‎02-23-2015

Help! IP Pooling Cisco Anyconnect CPPM

[ Edited ]

Hi Airheads,


First of all i'm quite new to the community and new to Aruba related products.
We started off in december with a WiFi pilot with the current setup:
Controller 7210 (version: 6.4.2.2)
AirWave
CPPM (version: 6.4.2.68288)

Together with our 3rd party network team we're trying to do all authentication for our switches and vpn via CPPM. The authentication part was easy to setup, however we are also trying to setup assigning IP address via CPPM. Is this possible? What would be to best way to achieve this?
Client > AnyConnect > CPPM (Authentication + IP) > AnyConnect > Client

Thanks in advance

Alex

Guru Elite
Posts: 7,869
Registered: ‎09-08-2010

Re: Help! IP Pooling Cisco Anyconnect CPPM

Where would you be setting the IP assignment? From a database, not DHCP?

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
New Contributor
Posts: 4
Registered: ‎02-23-2015

Re: Help! IP Pooling Cisco Anyconnect CPPM

Hi 

 

I'm trying to see which options i have, DHCP server, Database, Controller etc.. Any way is fine, just need to know how i assign the ip in CPPM

Guru Elite
Posts: 7,869
Registered: ‎09-08-2010

Re: Help! IP Pooling Cisco Anyconnect CPPM

The answer is really going to depend on what you want to do. Do you want static addressing or DHCP?

If you're going to use a DHCP server, ClearPass would not be involved.

If you're using Active Directory, IP addresses can be assigned for each user and ClearPass can send the IP back via a RADIUS VSA.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
New Contributor
Posts: 4
Registered: ‎02-23-2015

Re: Help! IP Pooling Cisco Anyconnect CPPM

[ Edited ]

Thanks, saw in 1 of your replies in a other thread a detailed explanation. (http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Cisco-ASA-VPN-Returning-IETF-Framed-IP-Address/m-p/219170#M16973)

Thanks for all the quick replies!


cappalli wrote:
The answer is really going to depend on what you want to do. Do you want static addressing or DHCP?

If you're going to use a DHCP server, ClearPass would not be involved.

If you're using Active Directory, IP addresses can be assigned for each user and ClearPass can send the IP back via a RADIUS VSA.

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: