Security

Reply
Frequent Contributor I

Set endpoint attribute during onboard

Hi community,

 

Is it possible to set an endpoint attribute during the onboard process of that endpoint (for example, set endpoint's username equals to the user that is onboarding)? I want to use that attribute for enforcement decision later when the endpoint does 802.1X authentication to the wireless network.

 

Please give me some advice.

 

Thank you,

 

 

Guru Elite

Re: Set endpoint attribute during onboard

Yes, you can. Use a ClearPass Enttity Update enforcement profile.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I

Re: Set endpoint attribute during onboard

Hi Tim,

 

It didn't work though I can see the status was ACCEPT. Below is my configuration and the log messages:

 

1.PNG

 

2.PNG

 

3.PNG

 

4.PNG

 

5.PNG

 

Could you please verify if this is a valid configuration? I guess the profile was not applied due to no End-Host Identifier available during onboard.

 

Thank you,

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: