Security

Reply
MVP
Posts: 1,392
Registered: ‎11-30-2011

does ClearPass pickup DHCP requests on publisher and subscribers?

couldn't find it for sure although this article* seems to indicate it should, so should a subscriber also pickup DHCP requests send to it and add them to the end point repository?

 

*) http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/What-is-the-limitation-in-ClearPass-for-DHCP-based-profiling/ta-p/216413

Guru Elite
Posts: 7,852
Registered: ‎09-08-2010

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

They can all process them, but only the publisher can write the info to the database.


Thanks,
Tim

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
MVP
Posts: 1,392
Registered: ‎11-30-2011

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

Tim thanks for the reply. So you are saying that the subscribers can receive them but don't act on them in anyway?

Guru Elite
Posts: 7,852
Registered: ‎09-08-2010

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

They essentially process them and forward them to the publisher.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
MVP
Posts: 1,392
Registered: ‎11-30-2011

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

ok, so DHCP requests which via a DHCP relay are send to a subscriber will end up in the endpoint repository (picked up by subscriber then forwarded to publisher which adds it)?

Moderator
Posts: 457
Registered: ‎11-09-2012

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

As Tim eluded to in an earlier post on this thread..... SUBs can receive DHCP forwarded messages, it will however just forward them to the PUB and then the PUB consolidates all this info, which can come from different profiling sources... DHCP, OUI, HTTP-Agent, TCP Fingerprinting, Cisco sensor etc. and then processes this data and uses as discussed in my below technote to come up with a fingerprint that is the most specific and the most 'trust-worthy' and then syn'c this back to the cluster.

 

ClearPass Profiling TechNote V1.1.pdf 


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
MVP
Posts: 1,392
Registered: ‎11-30-2011

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

thanks you both, was confused as it seemed the subscriber wasn't picking up DHCP requests, well nothing got added to the endpoint database. but perhaps i was just a little impatient.

 

will test some more.

Search Airheads
Showing results for 
Search instead for 
Did you mean: