Wireless Access

last person joined: 2 hours ago 

Access network design for branch, remote, outdoor and campus locations with Aruba access points, and mobility controllers.
Expand all | Collapse all

Clearpass blocking mac-adress

  • 1.  Clearpass blocking mac-adress

    Posted 12 days ago
    Hi.
    I'm kinda new to CP and i have a question on it's behaviour.
    We have 2 CP servers using MAC-Auth AAA against our ActiveDirectory domain. 

    The scenario i have seen is that our servicedesk configures an IPAD for example and attempts to connect it to our SSID before we have added the mac-adress to our domain controller.
    The login attempt will ofc fail, but the strange thing is that even if i then take the mac-adress of the client, adds it to correct place in AD it still fails to login.

    However come next day the client can login without any problem?

    Is there some kind of lockout/block if a client attempts to login multiple times without having a account in AD ?

    Thanks in advance
    /Lee

    ------------------------------
    Lee Armano
    ------------------------------


  • 2.  RE: Clearpass blocking mac-adress

    Posted 12 days ago
    There is a "policy result cache" available:

    Or you clear the Cache manually:



  • 3.  RE: Clearpass blocking mac-adress

    Posted 12 days ago
    You may need to adjust the AD cache timeout or clear the cache when a new mac address is added

    ------------------------------
    Victor Fabian, ACEX#8
    Mobility Architect @ WEI
    ------------------------------