Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass client timeout issue

This thread has been viewed 2 times

  • 1.  Clearpass client timeout issue

    Posted 3 hours ago

    Hi!

    i know that this subject is quite complicated but if you have knownledge this particular event. 

    This problem occurs after weekend usually. When computer has been turned off for the weekend. 

    When they power on computer on monday, it take very long time when computer get network access. It should use EAP-TLS computer certificate for authentication but it try to mac auth first. Like this

    And were it get this 30 second timeout for mac auth? We give MEITA PROFILOINTI VLAN 2490 enforcement where timetout is 3600 seconds?

    Here is port configuration of the  switch 

    interface 1/1/42
        no shutdown
        vlan access 1
        aaa authentication port-access dot1x authenticator
            cached-reauth
            cached-reauth-period 60
            max-eapol-requests 1
            max-retries 1
            quiet-period 5
            discovery-period 10
            enable
        aaa authentication port-access mac-auth
            enable
        loop-protect
        exit

    Should i add this line to port config 

    port-access onboarding-method concurrent <enable | disable>

    Or is it gonna generate more TIMEOUT problems?