Security

last person joined: 6 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Clearpass Guest: Bulk Device import additional fields? (Name field missing)

Jump to Best Answer
This thread has been viewed 45 times
  • 1.  Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 17, 2021 09:04 PM
    Is it possible to add the "Name" field when importing devices?
    In the attached screenshot are the only options I see: there is a place for Notes but nothing about the Name
    After a device is created then edited it is possible to set a name, and when manually creating a single device the name is mandatory, so hopefully it is just a field that needs to be added to this form? But I cannot identify this form in the normal list in order to edit the fields.

    Clearpass Guest Import Fields


  • 2.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 18, 2021 04:09 AM
    I briefly checked and could not find the answer. If you don't get a response on the forum soon, please work with your Aruba partner and Aruba Support.

    As an alternative, you may leverage the API as that has full access to all the fields.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------



  • 3.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 18, 2021 06:12 AM
    Looking at some of my old notes I used the visitor_name:

    Will this suffice?

    Derin

    ------------------------------
    Derin Mellor
    ------------------------------



  • 4.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 19, 2021 02:33 AM
    Hi,

    I am facing exactly the same problem as the post creator.
    There is no device name field in both the device import and export.

    When I create a single device there is a name field. As Derin says, visitor_name is used there (not sure if I added the field there or if it is already there by default).

    But the problem, at least for me at the moment, when importing (or exporting) devices: There is no form which could be customized to add e.g. the visitor_name field. But I have the same problem for guest account import. There I would like to add e.g. the sponsor name (as it is available in the form for a single account). Again, I can't find the form to customize it.

    I therefore believe that the form from step 2 of the device import or guest account import (where you assign the data to the matching fields), is hardcoded in Clearpass.

    ------------------------------
    Jens Wambsganss
    ------------------------------



  • 5.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 19, 2021 04:50 AM
    Please consider using the API as an alternative, or reach out to Aruba Support to check if there is another possibility through file import.

    Can you please explain what workflow you are trying to achieve? I have not seen these types of questions in the past on a regular basis, so you may have found a new application for the Guest Device Database.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 6.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 19, 2021 08:56 AM
    I think API will be the best way. However, the creation of accounts in our company is rather done by non-IT staff. They use the GUI of clearpass Guest. But since you can actually configure / modify so much in via GUI, I couldn't imagine that you can't add a name field to the import form. The post creator might feel the same way. And as luck would have it, I stumbled across the same question today. So I guess I will contact support.

    Ok. Actually, I don't think I'm doing anything special in terms of device accounts. E.g. we use the device accounts for MPSK.

    Because of the name field in the device import:
    It's just easier to tell devices apart by their name rather than their MAC address, or the end user can tell the name rather than the MAC address (when it comes to changes like time extensions).

    ------------------------------
    Jens Wambsganss
    ------------------------------



  • 7.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 19, 2021 10:11 AM
    For MPSK you can create nice end-user or operator workflows in ClearPass Guest, without the need to import. With Operator Profiles you can lock those down to just the required functionality.

    Fully agree that what you do should not be considered special. MPSK was added long after the import and export features, and the recommended/supported workflow is what I described above with ClearPass Guest Operators. That does not mean that import/export should not work, but as it was not designed that way, development may just have missed adding import/export in that use-case as a specific feature. TAC should be able to give you the answer.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 8.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)
    Best Answer

    Posted May 19, 2021 01:14 PM
    Just working on a project where I needed this.
    I created the following import file:

    Is Device,MAC Address,Role,mpsk,mpsk_enable,full name,sponsor,Activation,Expiration,Lifetime
    Yes,00-11-22-33-44-05,Printer,12345605,1,printer,bob,5/19/21 00:00,N/A,0
    Yes,00-11-22-33-44-06,Digital Signage,12345606,1,screeen,bert,5/19/21 00:00,N/A,0
    Yes,00-11-22-33-44-07,AudioVideo,12345607,1,appleTV,fred,5/19/21 00:00,N/A,0
    Yes,00-11-22-33-44-08,CCTV,12345608,1,camera,harry,5/19/21 00:00,N/A,0
    Yes,00-11-22-33-44-09,Printer,12345609,1,printer,alice,5/19/21 00:00,N/A,0


    With various sponsor: bob, bert, fred, harry and alice.






    Maybe I miss-understood the problem?


    ------------------------------
    Derin Mellor
    ------------------------------



  • 9.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 19, 2021 05:48 PM
    Thanks all for your responses.

    My use case is to have operators add many MAC addresses for an initial onboarding for colorless ports in a new building e.g. the CCTV contractor will add 500 cameras, the HVAC contractor will add 200 devices etc. In future they could use the individual form to add individual devices.

    I will be using the roles from Guest Device database to apply the correct DUR enforcement policies.

    As this is all MAC-based I was looking at the "Add Devices" import form, but looking at the example from derinmellor he has used the "Add Guest Account" import form and the accounts he imported have somehow showed up under "Manage Devices" instead of "Manage Guest Account"??

    So if I skip the Device form and rather use the Guest form but include a column in the csv for "Is Device" will that give me the desired outcome? (EDIT: Yes it will - see my next comment)

    ​​


  • 10.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 19, 2021 06:25 PM
    Update: yes derrinmellor has the correct answer - the import User form is more powerful than the import Device form and it can add Devices as well as Accounts. See screenshots attached.
    One flaw I have found is that if any row in the CSV has "Is Device" = 'No" that appears to be ignored and it is added as a Device anyway, but that is easy to work around. Edit: rather than entering "No" just leave the "Is Device" field blank.

    Guest Device Import screens






  • 11.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 20, 2021 04:44 AM

    Thanks to @derinmellor and @vf556-2.

    The last posts and just the screenshots have also helped me. I still don't have a final solution, but a great workaround that I'm very happy with.

    It's not the guest account import form and also not the device account import form, the magic word for me was "Auto-detected Fields:". This had never interfered with me before and I didn't know it existed. And Derin to your question

    > Maybe I miss-understood the problem?

    Without this auto-detection, you have no way to manually assign the fields in the form. E.g. the name field is missing. And this was my problem.

    But this auto-detection works just as well in the device account form. I.e. yes, Derin probably uses the guest account form to import devices, but the auto-detection and assignment works just as well in the device account import form. And there you can skip the "Is Device" column as well. But good to point out that you can also add device accounts via guest accounts.

    So looking back, that's been my problem, that the headers available in the CSV file never fit and I (or the users) logically had to rely on assigning them manually (which didn't fully work anything, as not all fields were available). To design the headers in such a way that the auto-detection takes effect is then of course a lot "smarter".

    Thanks a lot! ​​



    ------------------------------
    Jens Wambsganss
    ------------------------------



  • 12.  RE: Clearpass Guest: Bulk Device import additional fields? (Name field missing)

    Posted May 20, 2021 04:09 AM

    Historically the CPG Guest and Device was all referenced from the same form. I think this changed in about 6.7 when they separated them.

     

    Regards Derin

    Principle ClearPass Engineer

     

    Blue Sky Systems Limited

     

    Tel: 03300 101 550

    DDI: 03300 101 474

    Mobile: 07749 100 180

    Email: derin.mellor@blueskysystems.com

    Web: www.blueskysystems.co.uk

     

    Registered in England No: 8856125

    Registered Office: Dorset House, Regent Park, 297-299 Kingston Road, Leatherhead, KT22 7PL