Security

Reply
Frequent Contributor I
Posts: 66
Registered: ‎02-02-2012

Unable to ping controller from ClearPass

Hi, I recently set up a VMware ClearPass Policy Manager to integrate with the Aruba controllers.

I configured both management and data ports on different subnet. We have a master-local controller environment.

 

CPPM 6.0.1 VM installed on ESXi 5.

 

The issue is that from ClearPass i can ping any ip but the controllers ips, and from any controller I can ping any ip but the

ClearPass ip.

 

The ClearPass management port is on the same VLAN as the controllers and the data port is on a VLAN that is 

not configured on the controllers.

 

Has anyone seen this? Any troubleshooting steps I should pursue?

 

Thanks.

Guru Elite
Posts: 21,499
Registered: ‎03-29-2007

Re: Unable to ping controller from ClearPass

Make sure that the controller and the ClearPass Policy manager have matching subnet masks and default gateways.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

MVP
Posts: 1,409
Registered: ‎05-28-2008

Re: Unable to ping controller from ClearPass

Also make sure that the port/vlan is marked as trusted.
*****************2Plus Wireless Solutions****************************
Aruba Airheads - Powered By community for empower the community
************ Don't Forget to Kudos + me,If i helped you******************
Frequent Contributor I
Posts: 66
Registered: ‎02-02-2012

Re: Unable to ping controller from ClearPass

Hi Joseph,

 

Thanks for the quick reply. All subnet masks and gateways are correct on ClearPass and the controller.

From any device on any subnet, I can ping both ClearPass and Controller. But unable to ping each other.

 

Is it some thing tricky with ClearPass that I don't know?  I am new to ClearPass.

 

Please advise.

Guru Elite
Posts: 21,499
Registered: ‎03-29-2007

Re: Unable to ping controller from ClearPass

When you try to ping the Clearpass from the controller on the same VLAN, do you see the clearpass device in the ARP table on the controller?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor I
Posts: 66
Registered: ‎02-02-2012

Re: Unable to ping controller from ClearPass

Hi Joseph,

 

No, the ClearPass does not appear in the ARP table on the controller.

 

Regards,

Frequent Contributor I
Posts: 66
Registered: ‎02-02-2012

Re: Unable to ping controller from ClearPass

Hi Joseph,

 

It is working now the ClearPass and the Controller can ping each other. I just moved the ip that was configured on data port to  management port on the ClearPass. Now the ClearPass and the Controller are not on the same vlan but it's working.

 

Thanks to all for your help. 

Search Airheads
Showing results for 
Search instead for 
Did you mean: