Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

As Built Report for Aruba ClearPass

This thread has been viewed 44 times
  • 1.  As Built Report for Aruba ClearPass

    MVP GURU
    Posted Feb 22, 2024 05:31 AM

    Hello, i release the first version of As Built Report For Aruba ClearPass,

    it is a powershell script/module generate a report (HTML/Word) with the ClearPass Configuration, it is available on PS Gallery  and doc (and issue) on github

    some examples (HTML/Word) is available 

    It is based on 'public' clearpass.arubademo.net no yet updated to 6.11
    and there is some new API with 6.11 (Enforcement Policy/Profile), and you can't see on the sample 



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------


  • 2.  RE: As Built Report for Aruba ClearPass

    EMPLOYEE
    Posted Feb 22, 2024 05:18 PM

    this is great. Thanks for sharing.

    I had a look at the sample word document but I could not find the enforcement profiles that were used.

    does it also document the cluster settings,VIP info and also ClearPass Guest side of it?



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: As Built Report for Aruba ClearPass

    MVP GURU
    Posted Feb 23, 2024 03:20 AM

    Hi ariyap

    For enforcement (profiles and profil) coming from the environnement used for sample, always use 6.10 and there is no API for enforcement profil(es)

    No yet for cluster settings, VIP and ClearPass Guest, can you post on Github As built report Aruba ClearPass issue ? (and also what do you want to see for Guest stuff...)



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------



  • 4.  RE: As Built Report for Aruba ClearPass

    EMPLOYEE
    Posted Feb 23, 2024 04:45 PM

    on the guest stuff it would be good to see the list of weblogin/self rego  and their setting

    also extensions and operator profiles.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 5.  RE: As Built Report for Aruba ClearPass

    Posted Feb 27, 2024 02:59 PM

    That's really great. Just working on python clearpass documentation module :-) for 6.11 when I saw your post. 

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------



  • 6.  RE: As Built Report for Aruba ClearPass

    Posted Feb 28, 2024 02:18 AM

    Hi Alexis.

    I couldn't help myself and I try it.

    Looks fine, but I did have quite a problem getting it running. I almost never use PowerShell so my familiarity with it is approx zero, 

    I follow the instructions and install the script. Then I try to create a report and stumbled about the following error:

    Enter the path to save the As Built Report configuration file [d:\Development\AsBuildReport]:
    Please wait while the Aruba ClearPass As Built Report is being generated.
    New-AsBuiltReport : The term 'Invoke-AsBuiltReport.Aruba.ClearPass' is not recognized as the name of a cmdlet, function
    , script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is
    correct and try again.
    At line:1 char:1
    + New-AsBuiltReport -Report Aruba.ClearPass -Target clearpass1.selectiu ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
        + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,New-AsBuiltReport

    Uncle Google show a possible resolution. I use the following command to make it work:

    Import-Module AsBuiltReport.Aruba.ClearPass -force

    Now I just need 6.11 and role mappings, enforcement policies, enforcement profiles and such to appear in the report :-)

    Also onboarding and guest config is needed to really have a full report :-)

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------



  • 7.  RE: As Built Report for Aruba ClearPass

    MVP GURU
    Posted Feb 28, 2024 02:40 AM

    With 6.11 (and first release of the module), there is enforcement policies and profiles ;)

    Role mapping will coming soon

    I need to see what it is possible for onboarding and Guest with API...



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------



  • 8.  RE: As Built Report for Aruba ClearPass

    Posted Feb 28, 2024 02:51 AM

    Hi Alex.

    Yes, 6.11 has a much richer API also for Guests.

     

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------