Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Onboard provisioning problems - Cannot send HTTP Request - 12175

This thread has been viewed 1 times

  • 1.  Onboard provisioning problems - Cannot send HTTP Request - 12175

    Posted Sep 03, 2013 07:02 AM
      |   view attached

    Hi Community,

     

    I´ve a problem with my onboard configuration, I can´t provision to my clearpass,

    when I test the provisioning with a windows 7 client the log shows this message:

     

    Cannot send HTTP Request - 12175

     

    we use CPPM 6.2.0

     

     

    I put the log as attachment....

     

    Have anyone an idea?

     

     

    Thanks

     

     

    Attachment(s)

    txt
    quick1x.txt   28 KB 1 version


  • 2.  RE: Onboard provisioning problems - Cannot send HTTP Request - 12175

    EMPLOYEE
    Posted Sep 03, 2013 07:32 AM

    It looks like the Windows client cannot trust the server certificate.

     

    Do this:

     

    To confirm this is a certificate issue, navigate to Home » Onboard + WorkSpace » Deployment and Provisioning » Provisioning Settings and disable Validate Certificate option.  Also in this configuration section, make sure you have the provisioning address set to the FQDN.



  • 3.  RE: Onboard provisioning problems - Cannot send HTTP Request - 12175

    Posted Sep 03, 2013 08:45 AM
      |   view attached

    OK, thanks that works...


    Unbenannt.JPG

    but now I´ve another Problem.

    I put the log file into the attachment.

    Unbenannt2.JPG

     

    Maybe you or anybode else have an idea how to fix this.

     


    Thanks

    Attachment(s)

    txt
    error.txt   63 KB 1 version


  • 4.  RE: Onboard provisioning problems - Cannot send HTTP Request - 12175

    EMPLOYEE
    Posted Sep 03, 2013 08:49 AM

    Is this after you click on "Finish"?



  • 5.  RE: Onboard provisioning problems - Cannot send HTTP Request - 12175

    Posted Sep 03, 2013 08:51 AM

    this is after i click connect!



  • 6.  RE: Onboard provisioning problems - Cannot send HTTP Request - 12175

    EMPLOYEE
    Posted Sep 03, 2013 08:57 AM

    Okay.  Let's work backwards:

     

    It looks like your initial  redirect to onboard is http://192.168.88.225...  Can you redirect it to https://fqdn on certificate, instead.



  • 7.  RE: Onboard provisioning problems - Cannot send HTTP Request - 12175

    Posted Sep 03, 2013 09:09 AM

    Ok where can I change this?

     

    Capture.JPG



  • 8.  RE: Onboard provisioning problems - Cannot send HTTP Request - 12175

    EMPLOYEE
    Posted Sep 03, 2013 09:29 AM
    Leon123,

    You might want to open a case. There are a few things that you would need to get checked, like that your clients trust your server's CA and that your provisioning URL points to the server's fqdn . checking those would be painful on a forum and we would only be troubleshooting symptoms. Please open a TAC case.


  • 9.  RE: Onboard provisioning problems - Cannot send HTTP Request - 12175

    Posted Sep 03, 2013 09:31 AM

    OK thanks.