Security

last person joined: 9 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

[Onboard] Use Certificate and Active directory authentication

This thread has been viewed 1 times

  • 1.  [Onboard] Use Certificate and Active directory authentication

    Posted Feb 25, 2016 09:00 AM

    HI,
    For a customer I need to modify the actual 802.1x authentication service (that use Active directory such authentication source) on ClearPass Server for allow also authentication by certificate.

    In this case the customer buought Onboard license.

    So I need to have a single SSID where user can authenticate or with certificate or with active Directory credential.

    it is possbile?

     

    Can you give me some documentation about possible configuration?

    Regards
    Andrea



  • 2.  RE: [Onboard] Use Certificate and Active directory authentication

    EMPLOYEE
    Posted Feb 25, 2016 09:07 AM
    Are AD users going to be using EAP-PEAP or EAP-TLS? 

    Sent from Nine


  • 3.  RE: [Onboard] Use Certificate and Active directory authentication

    Posted Feb 25, 2016 09:16 AM

    HI,

    EAP-PEAP

     

    Regards

    Andrea



  • 4.  RE: [Onboard] Use Certificate and Active directory authentication
    Best Answer

    EMPLOYEE
    Posted Feb 25, 2016 09:19 AM
    You can configure both EAP-PEAP and EAP-TLS under authentication methods. This is a widely used configuration. 

    Sent from Nine


  • 5.  RE: [Onboard] Use Certificate and Active directory authentication

    Posted Feb 28, 2016 11:18 AM

    Hi cappali,

    ok but for the onboarding i have to create a secondary SSID?

     

    I need some guide line to configure this feature, can you give me some guide?

     

    Regards

    Andrea Acampa

    @cappalli wrote:
    You can configure both EAP-PEAP and EAP-TLS under authentication methods. This is a widely used configuration. 

    Sent from Nine

     



  • 6.  RE: [Onboard] Use Certificate and Active directory authentication

    Posted Mar 05, 2016 09:47 AM

    something like this:

    https://ase.arubanetworks.com/solution/id/34

     

    but if these are all domain joined systems onboard doesn't seem needed.