11-24-2016 03:20 PM
Just troubleshooting an issue where I'm unable to connect to a network that uses ClearPass to do basic MAC auth against the endpoints repository.
What should the 'initial role' be set to in the AAA policy? Should this allow DHCP etc so the client can associate properly?
Currently the initial role is 'denyall', which doesn't seem right?
Should it be possible to see user's that are in the denyall role with 'show user-table'?
11-24-2016 03:34 PM
For example, in a guest workflow, this may be the guest registration role.
Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP