Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Online Status in Access Tracker Incorrect - CPPM version 6.5.1

This thread has been viewed 2 times

  • 1.  Online Status in Access Tracker Incorrect - CPPM version 6.5.1

    Posted Jun 03, 2015 11:24 AM

    In Access Tracker my device that is currently connected is showing Online Status = Offline.  In the Accounting tab it shows the device as currently active.  My Cisco switch is sending Accounting packets to ClearPass and CoA is working correctly to change the status of the switch port (ie. ReAuthenticate Session works fine).  

     

    What mechanism toggles the Online Status value offline/online?

     

    Screen Shot 2015-06-03 at 11.15.54 AM.png

     

    Screen Shot 2015-06-03 at 11.16.08 AM.png



  • 2.  RE: Online Status in Access Tracker Incorrect - CPPM version 6.5.1

    Posted Jun 03, 2015 11:33 AM

    One thing I noticed is the timestamp on the Summary screen and the accounting tab are different.  The accounting tab has the date from yesterday, not the current date today when the session started.  The time on the switch is correct.  Is there a cached timestamp for radius accounting somewhere that could affect the Online status becuase of this?



  • 3.  RE: Online Status in Access Tracker Incorrect - CPPM version 6.5.1

    Posted Jun 03, 2015 01:39 PM
    Can you go to Monitoring > Accounting and look for that device and see if the information showing there is correct ?

    Do you have enabled :
    Administration » Server Manager » Server Configuration > Log Accounting Interim-Update Packets, on all your servers ?


  • 4.  RE: Online Status in Access Tracker Incorrect - CPPM version 6.5.1

    Posted Jun 03, 2015 02:18 PM

    Victor,

     

    Yes, the device shows up in Monitoring --->Accounting and the information looks correct.

     

    Screen Shot 2015-06-03 at 2.15.51 PM.png

     

    Logging of interim packets is also turned on both nodes in the cluster.

     

    Screen Shot 2015-06-03 at 2.17.02 PM.png



  • 5.  RE: Online Status in Access Tracker Incorrect - CPPM version 6.5.1

    Posted Jun 04, 2015 06:50 AM
    I suggest you open a TAC case to get to the bottom of this .

    You have everything configured correctly.


  • 6.  RE: Online Status in Access Tracker Incorrect - CPPM version 6.5.1

    Posted Jun 05, 2015 10:15 AM

    I have a case open now.



  • 7.  RE: Online Status in Access Tracker Incorrect - CPPM version 6.5.1
    Best Answer

    Posted Jun 15, 2015 07:25 AM

    Still working with TAC to resolve issue.  The subscriber shows the status correct, while the publisher is incorrect.



  • 8.  RE: Online Status in Access Tracker Incorrect - CPPM version 6.5.1

    Posted Jan 05, 2017 11:00 AM

    what ended up being the resolution? I'm on 6.6.2, with the same thing happening