10-11-2016 02:20 AM
I've configured one of our test controllers to load balance eap based auths across multiple clearpass servers and amnow thinking of rolling this out to production.
However, we recently had an issue where clearpass ->AD conectivity was broken so although clearpass happily processed pap,mschap based auths,eap based ones failed.
Whjat sort of health checking does a controler do to ascertain whether a RADIYS server is up and running? Is it possible to set up a health check that requires successful completion of an eap based authentication pripr to the controller passing real auths to a particular server.
10-11-2016 03:38 AM - edited 10-11-2016 03:40 AM
At this time, the controller only checks for a valid response from the radius server, and not for types of responses, to determine what server is used. If you think this would be helpful, please request the idea here: https://arubanetworkskb.secure.force.com/cp/ideas/
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs