In addition to the suggestion to start with passive profiling (DHCP, etc) first, I would in such a case enable MAC authentication, then create a service with [Allow All MAC], and Endpoint Repository as the authentication source.
For getting the most out if visibility, your Aruba partner can get a guide on Arubapedia for Partners (Search for: ClearPass Visibility), which is fully focused on visibility without authentication.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Aug 23, 2024 08:19 AM
From: fjulianom
Subject: ClearPass - Configuration for device visibility
Hi community,
I want to configure a service in ClearPass to have visibility all the devices my customer has. I don't want to authenticate them right now, only just seeing what he has, and then, I will create other service for block unauthorized devices. Because many of them are printers, phones, etc. and don't authenticate, I don't know what to put for Authentication Methods, Authentication Sources and Authorization Source, since they are mandatory fields. I have just tested with Authentication Source = [Local User Repository] and Authorization Source = [Endpoints Repository]. With this, ClearPass rejects and show this:
![](https://higherlogicdownload.s3.amazonaws.com/HPE/MessageImages/37f4b312104d406787921d940720a467.png)
Any idea?
------------------------------
Regards,
Julian
------------------------------