Wireless Access

Reply
Contributor I
Posts: 28
Registered: ‎05-31-2016

AirGroup with ClearPass no sessions

Hi,

We have a master/local controller (6.4.4) set up with CPPM handling AirGroup access. I have a OSX server doing AirPrinting which suddenly stopped working.

 

The OSX server was suddenly no longer visible to clients and I thought it was because the APs and clients had moved to the secondary controller. I wasn't sure how to handle that, so I rebooted the AP and made sure it reconnected to the master (which it did).

 

However, even after doing so, the OSX server happily connects, but still is not visible to clients. It is showing up via show airgroup servers, but it is NOT showing up in the CPPM Guest>Manage Devices: active sessions, which is why I assume clients cannot see it.

 

Why isn't it showing up in the ClearPass active sessions (when it is in fact active)

 

Thanks!

--Ben

 

show airgroup servers mdns | begin a8:86:dd:ae:7a:5f
a8:86:dd:ae:7a:5f  10.10.51.15    mDNS  csd8-cache1             airprint  2115  wireless        MEDIA-PLAYER-ROLE         csd-appletv-wireless  CHS-W3102-Hall

MVP
Posts: 4,238
Registered: ‎07-20-2011

Re: AirGroup with ClearPass no sessions

Can you try running the following commands:

aaa user delete mac <server mac>

clear airgroup server <server mac>

 

And see if that helps

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor I
Posts: 28
Registered: ‎05-31-2016

Re: AirGroup with ClearPass no sessions

Hi Victor,

 

I'm waiting to hear back from the remote location, but from the console side, everything looks the same as before.

 

Should it show up as having an active session in the ClearPass Guest Manager?

Guru Elite
Posts: 8,338
Registered: ‎09-08-2010

Re: AirGroup with ClearPass no sessions

Is ClearPass being used for authentication or only as an AirGroup overlay?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 4,238
Registered: ‎07-20-2011

Re: AirGroup with ClearPass no sessions

The active sessions is based of RADIUS accounting not airgroup.

YOu can take a look at access tracker to see if the airgroup request are coming through for that server

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor I
Posts: 28
Registered: ‎05-31-2016

Re: AirGroup with ClearPass no sessions

@Tim - Yes, CPPM does all the auth/guest etc

 

@Victor Attached is a screenshot of the CPPM access tracker, it looks correct to me

 

2017-03-16 11_52_01-ClearPass Policy Manager - Aruba Networks.png

Contributor I
Posts: 28
Registered: ‎05-31-2016

Re: AirGroup with ClearPass no sessions

I ended up solving this, but I'm not entirely sure where the problem actually was. I did reboot the local controller to force all the AP's back to the master and I did some CPPM updates, but I THINK the problem may have actually been on the OSX "server".

 

Either way, it's working...and working is good!

Aruba Employee
Posts: 2
Registered: ‎09-21-2011

Re: AirGroup with ClearPass no sessions

In case you run into this issue again, you may want to double check if the local controller is also configured on ClearPass as an AirGroup controller so that AirGroup server updates can be sent to the local when needed.

Search Airheads
Showing results for 
Search instead for 
Did you mean: