Security

 View Only
last person joined: 11 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass C2010 / DL20 Gen 10 Upgrade

This thread has been viewed 17 times
  • 1.  ClearPass C2010 / DL20 Gen 10 Upgrade

    Posted Nov 22, 2022 09:01 AM
    Hello all,

    Is it possible to upgrade the memory and processor in a C2010, they are based on a DL20 Gen 10.

    I have found the components that should work but I was thinking that the server could be somehow locked in the BIOS to the original components.

    1 x P17111-L21      HPE DL20 Gen10 Intel Xeon E-2278G (3.4 GHz/8-core/80 W) FIO processor kit
    4 x 879507-B21      HPE 16GB (1 x 16GB) dual rank x 8 DDR4-2666 CAS-19-19-19 unbuffered standard memory kit


    ------------------------------
    Jason
    ------------------------------


  • 2.  RE: ClearPass C2010 / DL20 Gen 10 Upgrade

    EMPLOYEE
    Posted Nov 23, 2022 09:09 AM
    That is not supported. I'm not sure if there is any 'protection' that prevents you from doing that, except that there is a good chance that changing the processor will invalidate the platform license (PAK).

    I don't think the BIOS has been modified. You could check here for the recommended BIOS and see if that is different or the same from the original HPE BIOS. Still hardware upgrades on ClearPass hardware appliances are not supported.

    Why is it that you would want to do this?

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: ClearPass C2010 / DL20 Gen 10 Upgrade

    Posted Nov 23, 2022 12:49 PM

    Hello Herman, 
    The customers ClearPass appliances are struggling with resources  I guess the only supported option will be to change them to the C3010.  

    Is a bare metal server install supported or would the C3010 or VM be the only options? 



    ------------------------------
    Jason
    ------------------------------



  • 4.  RE: ClearPass C2010 / DL20 Gen 10 Upgrade

    EMPLOYEE
    Posted Nov 24, 2022 04:39 AM
    Bare metal is not supported, but you could deploy ESXi/Hyper-V/KVM on the bare metal and run a ClearPass VM on top of it.
    If the load on the current appliance exceeds the capacity of the C2010, then C3010 or C3000V would be the options, as well adding an extra ClearPass server and distributing the load.

    Please work with your Aruba partner or Aruba SE/TAC to get the current load investigated if it is significant higher than what the C2010 should be able to handle.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 5.  RE: ClearPass C2010 / DL20 Gen 10 Upgrade

    Posted Nov 25, 2022 08:45 AM
    Thanks Herman, the company I work for is an Aruba partner. We will talk to the customer and probably swap the C2010s to C3010a.

    ------------------------------
    Jason
    ------------------------------