06-06-2017 07:45 AM
I was wondering if anyone knew how to search for a client IP address in ClearPass? For instance, I want to see which client was assigned a specific IP address at a specific time. If I look in Access Tracker and click on a session I can see the "Radius:IETF:Framed-IP-Address" attribute in the RADIUS response but I cannot see a sensible way of searching for this.
Any help would be appreciated.
Solved! Go to Solution.
06-07-2017 01:31 AM
Yes I know I can find the Framed IP that way, but how do I search for it without sifting through thousands of entries in access tracker? Presuming I know nothing about the username, SSID etc. All I have is the IP address and want to find what user was allocated that address at a specific time?
06-07-2017 01:36 AM - edited 06-07-2017 01:38 AM
To give you the exact scenario may help....
We are informed by our ISP that a copyright infringment has taken place on our network. All they can tell us about the culprit is the IP address and the time the offence took place.
Is there a way to find out in Insight/CPPM who was assigned that IP address at the specific time?
Obviously CPPM has the data as I can see the IP address by looking at the Radius response but how do I search for that?
06-07-2017 02:11 AM
Like Tim stated you can do IP search in insight. This was all taken from a 6.6.5 version of CPPM. One thing I would suggest is to also file a RFE for this to be avilible in the search bar on top. You can get the total number of auths in the quick view but not the auth times.
To get the full auth record you will need to include CSV.
Here is a sameple
--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.
--Problem Solved? Click "Accepted Solution" in a post.