Security

Reply
Occasional Contributor II
Posts: 12
Registered: ‎09-09-2014

How long should it take CPPM to update wireless controllers with new AppleTV?

We're noticing that when we add a new Apple TV to the network, it will immediately show on the wireless controllers with "show airgroup servers". We then use that data to add it as a new device to Clearpass Guest, scoped to the building it's in. It's set to active "now". However, it won't show up on the wireless controllers for roughly 24 hours, as seen with "show airgroup cppm entries". Our query interval is 1 hour, but I can't figure out where that 24 hour setting is coming from. 

Guru Elite
Posts: 8,765
Registered: ‎09-08-2010

Re: How long should it take CPPM to update wireless controllers with new AppleTV?

The controller initiates an AirGroup authorization request and ClearPass
responds immediately.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Aruba Employee
Posts: 10
Registered: ‎05-27-2013

Re: How long should it take CPPM to update wireless controllers with new AppleTV?

When an Apple TV is registered in Clearpass guest (with Airgroup enabled), a CoA is issued to the controller to update the airgroup CPPM entries on the controller. This should be immediate. A packet capture on Airgroup CoA port should help confirm if this is being sent out or not.

Occasional Contributor II
Posts: 12
Registered: ‎09-09-2014

Re: How long should it take CPPM to update wireless controllers with new AppleTV?

Thanks Tim and Matt. Looks like I need to run some packet captures so see what's being sent and when. We have roughly 75 Apple TVs now, and all I'm sure of is that none of them have ever shown up immediately in the "CPPM entries" table, but all of them show up somewhere between 22 and 24 hours later. 

Guru Elite
Posts: 21,515
Registered: ‎03-29-2007

Re: How long should it take CPPM to update wireless controllers with new AppleTV?

What ArubaOS version and Controller platform is this?

It should be immediate...


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 12
Registered: ‎09-09-2014

Re: How long should it take CPPM to update wireless controllers with new AppleTV?

CPPM - 6.3.6.67943 on CP-VA-5K

Wireless Master -- 6.3.1.13 on OAW-4550-US

Wireless Slave --   6.3.1.12 on OAW-4750-US

Guru Elite
Posts: 21,515
Registered: ‎03-29-2007

Re: How long should it take CPPM to update wireless controllers with new AppleTV?

Okay.  Do you have "AirGroup CPPM enforce registration" Enabled?  That would mean a device would not be seen until is is entered in Airgroup on CPPM.  Or, have you made all servers available to everyone in the controller?  You might want to turn off CPPM enforce registration to see if all AppleTVs are present immediately to rule out an issue with CPPM configuration, etc.

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 12
Registered: ‎09-09-2014

Re: How long should it take CPPM to update wireless controllers with new AppleTV?

Hi Colin,   enforcement is enabled. We did turn it off the other day, and Apple TVs immediately showed up. We turned enforcement back on, and the Apple TVs disappeared again. I checked a few more times throughout the day with "show airgroup cppm entries" and the new A TV hadn't showed up yet. Then, after 24 hours, it finally showed up. 

Guru Elite
Posts: 21,515
Registered: ‎03-29-2007

Re: How long should it take CPPM to update wireless controllers with new AppleTV?

The only thing I can think of is that your clearpass is not up to date, so you might be running into a bug.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Aruba Employee
Posts: 10
Registered: ‎05-27-2013

Re: How long should it take CPPM to update wireless controllers with new AppleTV?

CPPM - 6.3.6.67943 is fairly old, can you try upgrading to 6.5.x (6.5.3 is the latest)

Search Airheads
Showing results for 
Search instead for 
Did you mean: