Wireless Access

Reply
Contributor II
Posts: 52
Registered: ‎12-11-2012

Role Mapping - Smart Devices

Within CPPM, is there a way to define a role mapping for all smartdevices (Andriod, iOS, Blackberry)? I try the following an it's not working.

 

SmartDevice Role Mapping.PNG

Guru Elite
Posts: 8,633
Registered: ‎09-08-2010

Re: Role Mapping - Smart Devices

Authorization:[Endpoints Repository] Category EQUAL Smartdevice

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 52
Registered: ‎12-11-2012

Re: Role Mapping - Smart Devices

I can only set it like this and it still not working..

 

SmartDevice Role Mapping_v2.PNG

Contributor II
Posts: 52
Registered: ‎12-11-2012

Re: Role Mapping - Smart Devices

OK...i got the setting per your suggesting and it's till not working...

 

SmartDevice Role Mapping_v3.PNG

Guru Elite
Posts: 8,633
Registered: ‎09-08-2010

Re: Role Mapping - Smart Devices

If you lookup the device in the endpoint repository, is it profiled?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 52
Registered: ‎12-11-2012

Re: Role Mapping - Smart Devices

Profile is "No".

Guru Elite
Posts: 8,633
Registered: ‎09-08-2010

Re: Role Mapping - Smart Devices

Do you have DHCP relays configured pointing to ClearPass?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 52
Registered: ‎12-11-2012

Re: Role Mapping - Smart Devices

No. Not sure where to do that at. Our DHCP are handle by the domain controller.

Guru Elite
Posts: 8,633
Registered: ‎09-08-2010

Re: Role Mapping - Smart Devices

Wherever your layer 3 interfaces live for the clients, you need to add DHCP relays pointing to the ClearPass servers.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 52
Registered: ‎12-11-2012

Re: Role Mapping - Smart Devices

We have the DHCP relay point to our DHCP server currently. If I were to change that to Clearpass would that break DHCP to my Domain controller who is handling out the IP? How is that suppose to fix DeviceFinger printing of SmartDevices?

Search Airheads
Showing results for 
Search instead for 
Did you mean: