Security

Hi,

 

 I'm trying 802.1X on an Aruba deployment but on the clearpass cannot get the device profiling like: Computer, Phone, windows, android, etc..

 

 I can get them when performing captive portal but not with 802.1X.

 

 Suggestions..

Do you have DHCP helper addresses pointed to ClearPass?

Where shoul I set that? I'm in an instant scenario.

Wherever the L3 gateway is for the client.

You mean, if my gateway is the firewall, should I set up that on the firewall?

Yes, wherever the default gateway for the client is.

Is Aruba Profling better than Greatbay Software Profiler?

Of course it is! Are you considering deploying ClearPass at Cisco?

Be sure to reach out to your local Aruba team to get started.

Why do i need to set that when doing the 802.1x and not for the captive portal?

With 802.1x, profiling takes place after successful authentication, so the device needs to have been authenticated first, before being profiled.

When I log into the portal i get the device info in the access tracker without configure any helper address but with 802.1x the helper address is necessary. Why?

We use information in the DHCP discover packet to profile the device.

---

@ivanvera wrote:

When I log into the portal i get the device info in the access tracker without configure any helper address but with 802.1x the helper address is necessary. Why?

---

ClearPass can also profile devices via user-agent, when a user requests a captive portal page from ClearPass:

http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/index.htm#CPPM_UserGuide/PolicyProfile/Profile_overview.htm