Security

last person joined: yesterday 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass, ArubaOS switches and LACP DUR

  • 1.  ClearPass, ArubaOS switches and LACP DUR

    Posted Jan 18, 2021 10:48 AM
    Hi fellow Aruba fans,

    I have a question I could not find the answer for in documentation.

    Are "Downloadable User Roles" supported on LACP trunk? I cant go to site to test this myself due to current climate and
    I have a customer who would like to "Team 2 nics" on his server to get better throughput and redundancy. Server would be connected to 2930M, which is already using DUR's on single ports, but I've never tried this on LACP trunk.

    Any help greatly appreciated.

    Best Regards,

    Marty

    ------------------------------
    Martin Tucek
    ------------------------------


  • 2.  RE: ClearPass, ArubaOS switches and LACP DUR

    Posted Jan 19, 2021 06:00 AM
    Hi Marty,

    No, it is not possible to use DUR and LACP...

    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------



  • 3.  RE: ClearPass, ArubaOS switches and LACP DUR

    Posted Jan 19, 2021 05:44 PM
    Just to clarify, role-based policy is not available on trunks. It is not specific to downloadable vs local roles.

    ------------------------------
    Tim C
    ------------------------------



  • 4.  RE: ClearPass, ArubaOS switches and LACP DUR

    Posted Jan 21, 2021 04:57 AM
    Thank you both for your clarification.

    Best Regards,

    Martin

    ------------------------------
    Martin Tucek
    ------------------------------



  • 5.  RE: ClearPass, ArubaOS switches and LACP DUR

    Posted Jan 23, 2021 06:35 AM
    Hi,

    I would just go further, you cannot enable authentication on link aggregated ports. 

    BR
    Florian

    ------------------------------
    -------------------------------------------------------------------------------
    Florian Baaske
    -------------------------------------------------------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    -------------------------------------------------------------------------------
    Also visit the AirHeads Youtube Channel:
    https://www.youtube.com/channel/UCFJCnuXFGfEbwEzfcgU_ERQ
    -------------------------------------------------------------------------------
    Feel free to visit my personal Blog
    https://www.flomain.de
    ------------------------------