Security

Reply
Super Contributor I
Posts: 289
Registered: ‎02-07-2013

Manually setting device type for unprofiled device

Hi,

I've a couple of Kaba door locks that are being MAC-Auth'd against CPPM 6.5 One of them, set up to use dhcp  works just fine, and is  correctly identified as an Embeded/Workforce Device/Kaba.... device.

 

The other one doesn't use DHCP so isn''t profiled, its just sitting there as an unknown device. I can set it to be a known device, but when I try to set the  Embeded ..... Kaba settings I get an error saying that I can only change the fingerprint for a profiled device. Is there anyway round this? At the moment I'd rather not enable DHCP on the Kaba device.

 

Rgds

Alex

 

MVP
Posts: 1,392
Registered: ‎11-30-2011

Re: Manually setting device type for unprofiled device

no, i don't believe you can currently overwrite the profiled information.

 

what you can do is create your own custom attribute and build your rules based on that.

Guru Elite
Posts: 19,964
Registered: ‎03-29-2007

Re: Manually setting device type for unprofiled device


alexsuoy wrote:

Hi,

I've a couple of Kaba door locks that are being MAC-Auth'd against CPPM 6.5 One of them, set up to use dhcp  works just fine, and is  correctly identified as an Embeded/Workforce Device/Kaba.... device.

 

The other one doesn't use DHCP so isn''t profiled, its just sitting there as an unknown device. I can set it to be a known device, but when I try to set the  Embeded ..... Kaba settings I get an error saying that I can only change the fingerprint for a profiled device. Is there anyway round this? At the moment I'd rather not enable DHCP on the Kaba device.

 

Rgds

Alex

 



alexsuoy wrote:

Hi,

I've a couple of Kaba door locks that are being MAC-Auth'd against CPPM 6.5 One of them, set up to use dhcp  works just fine, and is  correctly identified as an Embeded/Workforce Device/Kaba.... device.

 

The other one doesn't use DHCP so isn''t profiled, its just sitting there as an unknown device. I can set it to be a known device, but when I try to set the  Embeded ..... Kaba settings I get an error saying that I can only change the fingerprint for a profiled device. Is there anyway round this? At the moment I'd rather not enable DHCP on the Kaba device.

 

Rgds

Alex

 



alexsuoy wrote:

Hi,

I've a couple of Kaba door locks that are being MAC-Auth'd against CPPM 6.5 One of them, set up to use dhcp  works just fine, and is  correctly identified as an Embeded/Workforce Device/Kaba.... device.

 

The other one doesn't use DHCP so isn''t profiled, its just sitting there as an unknown device. I can set it to be a known device, but when I try to set the  Embeded ..... Kaba settings I get an error saying that I can only change the fingerprint for a profiled device. Is there anyway round this? At the moment I'd rather not enable DHCP on the Kaba device.

 

Rgds

Alex

 


Alex,


 

If it is being mac authenticated, in ClearPass 6.5, from the access tracker, you can attempt to perform an Nmap scan to get that device profiled by first clicking on the "Change Status" button:

 

Screenshot 2015-05-17 at 14.58.37.png

 

Screenshot 2015-05-17 at 14.57.05.png

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Search Airheads
Showing results for 
Search instead for 
Did you mean: