Security

Hi community,

 

I'm planning to put my CPPM server in a public zone with public IP address (technically, it still has private IP address but I public it through static NAT). This way, I can have my Radius client (NAS device) in the remote site to directly point to the public IP address of CPPM. My question is, can Radius work through NAT? My Radius client is behind a NAT device, just like the CPPM.

 

Thank you,

Standard NAD to RADIUS server should work fine.
You will have some issues getting dynamic authorization to work (if that is required)

If you are exposing ClearPass to the internet via public IP address, make sure you setup Applipcation Restrictions to prevent any IP address from accessing administrative pages - Please reference the ClearPass Hardening Guide.

 

In terms of NAT, I've done it the other way and it required me add the NAT'd IP and the real IP as network devices, but you may not need to do this the way you are explaining.

Thanks Tim and Michael for your advice. Much appreciate.