Security

this condition WAS WORKING BEFORE.

Removing it make service match but captive portal does not work too...

Actually, users are not "catched" by captive portal, and clients come with MAC adress as user and that make service not match.

No change was made on clearpass, only on controler, and that was only licence add... So controler seems to be "misconfigured" or going crazy ?
What could i do to debug it ?
Original Message:
Sent: Jun 29, 2022 12:27 PM
From: Dustin Burns
Subject: Clearpass / Guest access not working anymore

"Failed to classify request to service" means that none of your ClearPass services are matching the radius request. Check the service you want it to hit, and see if there was something that changed after the controller reboot. You can see the attributes in the RADIUS request portion of the access tracker entry. In your services see if the RADIUS request attributes line up with the service. Does your controller have an IP in the guest VLAN to allow for the captive portal to work? Maybe somehow that is missing?

------------------------------
Dustin Burns

Lead Mobility Engineer @Worldcom Exchange, Inc.

ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
If my post was useful accept solution and/or give kudos

Original Message:
Sent: Jun 29, 2022 12:21 PM
From: BILLOT Emmanuel
Subject: Clearpass / Guest access not working anymore

Hi,

I recently experienced a boring issue : last week i add 20 AP licences and PEF to our controler. Import was a success.
Some issue begin to appear on 802.1X SSID, with no real cause.
I rebooted controler and all seemed to be ok.

However, i notice after that Guest access was no more working too, even after controler reboot.
In clearpass, all request fail with "Failed to classify request to service" as all clients come with mac address as username, and do not trigger captive portal.

No other configuration was modified, only new licence import. No way to make guest work again, when a guest request is done; controler says "Authentication server request Timeout" and clearpass reject all request with "Failed to classify request to service".

Does anyone know what could happen ?

Regards,

this condition WAS WORKING BEFORE.

Removing it make service match but captive portal does not work too...

Actually, users are not "catched" by captive portal, and clients come with MAC adress as user and that make service not match.

No change was made on clearpass, only on controler, and that was only licence add... So controler seems to be "misconfigured" or going crazy ?
What could i do to debug it ?
Original Message:
Sent: Jun 29, 2022 12:27 PM
From: Dustin Burns
Subject: Clearpass / Guest access not working anymore

"Failed to classify request to service" means that none of your ClearPass services are matching the radius request. Check the service you want it to hit, and see if there was something that changed after the controller reboot. You can see the attributes in the RADIUS request portion of the access tracker entry. In your services see if the RADIUS request attributes line up with the service. Does your controller have an IP in the guest VLAN to allow for the captive portal to work? Maybe somehow that is missing?

------------------------------
Dustin Burns

Lead Mobility Engineer @Worldcom Exchange, Inc.

ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
If my post was useful accept solution and/or give kudos

Original Message:
Sent: Jun 29, 2022 12:21 PM
From: BILLOT Emmanuel
Subject: Clearpass / Guest access not working anymore

Hi,

I recently experienced a boring issue : last week i add 20 AP licences and PEF to our controler. Import was a success.
Some issue begin to appear on 802.1X SSID, with no real cause.
I rebooted controler and all seemed to be ok.

However, i notice after that Guest access was no more working too, even after controler reboot.
In clearpass, all request fail with "Failed to classify request to service" as all clients come with mac address as username, and do not trigger captive portal.

No other configuration was modified, only new licence import. No way to make guest work again, when a guest request is done; controler says "Authentication server request Timeout" and clearpass reject all request with "Failed to classify request to service".

Does anyone know what could happen ?

Regards,

this condition WAS WORKING BEFORE.

Removing it make service match but captive portal does not work too...

Actually, users are not "catched" by captive portal, and clients come with MAC adress as user and that make service not match.

No change was made on clearpass, only on controler, and that was only licence add... So controler seems to be "misconfigured" or going crazy ?
What could i do to debug it ?
Original Message:
Sent: Jun 29, 2022 12:27 PM
From: Dustin Burns
Subject: Clearpass / Guest access not working anymore

"Failed to classify request to service" means that none of your ClearPass services are matching the radius request. Check the service you want it to hit, and see if there was something that changed after the controller reboot. You can see the attributes in the RADIUS request portion of the access tracker entry. In your services see if the RADIUS request attributes line up with the service. Does your controller have an IP in the guest VLAN to allow for the captive portal to work? Maybe somehow that is missing?

------------------------------
Dustin Burns

Lead Mobility Engineer @Worldcom Exchange, Inc.

ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
If my post was useful accept solution and/or give kudos

Original Message:
Sent: Jun 29, 2022 12:21 PM
From: BILLOT Emmanuel
Subject: Clearpass / Guest access not working anymore

Hi,

I recently experienced a boring issue : last week i add 20 AP licences and PEF to our controler. Import was a success.
Some issue begin to appear on 802.1X SSID, with no real cause.
I rebooted controler and all seemed to be ok.

However, i notice after that Guest access was no more working too, even after controler reboot.
In clearpass, all request fail with "Failed to classify request to service" as all clients come with mac address as username, and do not trigger captive portal.

No other configuration was modified, only new licence import. No way to make guest work again, when a guest request is done; controler says "Authentication server request Timeout" and clearpass reject all request with "Failed to classify request to service".

Does anyone know what could happen ?

Regards,

this condition WAS WORKING BEFORE.

Removing it make service match but captive portal does not work too...

Actually, users are not "catched" by captive portal, and clients come with MAC adress as user and that make service not match.

No change was made on clearpass, only on controler, and that was only licence add... So controler seems to be "misconfigured" or going crazy ?
What could i do to debug it ?
Original Message:
Sent: Jun 29, 2022 12:27 PM
From: Dustin Burns
Subject: Clearpass / Guest access not working anymore

"Failed to classify request to service" means that none of your ClearPass services are matching the radius request. Check the service you want it to hit, and see if there was something that changed after the controller reboot. You can see the attributes in the RADIUS request portion of the access tracker entry. In your services see if the RADIUS request attributes line up with the service. Does your controller have an IP in the guest VLAN to allow for the captive portal to work? Maybe somehow that is missing?

------------------------------
Dustin Burns

Lead Mobility Engineer @Worldcom Exchange, Inc.

ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
If my post was useful accept solution and/or give kudos

Original Message:
Sent: Jun 29, 2022 12:21 PM
From: BILLOT Emmanuel
Subject: Clearpass / Guest access not working anymore

Hi,

I recently experienced a boring issue : last week i add 20 AP licences and PEF to our controler. Import was a success.
Some issue begin to appear on 802.1X SSID, with no real cause.
I rebooted controler and all seemed to be ok.

However, i notice after that Guest access was no more working too, even after controler reboot.
In clearpass, all request fail with "Failed to classify request to service" as all clients come with mac address as username, and do not trigger captive portal.

No other configuration was modified, only new licence import. No way to make guest work again, when a guest request is done; controler says "Authentication server request Timeout" and clearpass reject all request with "Failed to classify request to service".

Does anyone know what could happen ?

Regards,

this condition WAS WORKING BEFORE.

Removing it make service match but captive portal does not work too...

Actually, users are not "catched" by captive portal, and clients come with MAC adress as user and that make service not match.

No change was made on clearpass, only on controler, and that was only licence add... So controler seems to be "misconfigured" or going crazy ?
What could i do to debug it ?
Original Message:
Sent: Jun 29, 2022 12:27 PM
From: Dustin Burns
Subject: Clearpass / Guest access not working anymore

"Failed to classify request to service" means that none of your ClearPass services are matching the radius request. Check the service you want it to hit, and see if there was something that changed after the controller reboot. You can see the attributes in the RADIUS request portion of the access tracker entry. In your services see if the RADIUS request attributes line up with the service. Does your controller have an IP in the guest VLAN to allow for the captive portal to work? Maybe somehow that is missing?

------------------------------
Dustin Burns

Lead Mobility Engineer @Worldcom Exchange, Inc.

ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
If my post was useful accept solution and/or give kudos

Original Message:
Sent: Jun 29, 2022 12:21 PM
From: BILLOT Emmanuel
Subject: Clearpass / Guest access not working anymore

Hi,

I recently experienced a boring issue : last week i add 20 AP licences and PEF to our controler. Import was a success.
Some issue begin to appear on 802.1X SSID, with no real cause.
I rebooted controler and all seemed to be ok.

However, i notice after that Guest access was no more working too, even after controler reboot.
In clearpass, all request fail with "Failed to classify request to service" as all clients come with mac address as username, and do not trigger captive portal.

No other configuration was modified, only new licence import. No way to make guest work again, when a guest request is done; controler says "Authentication server request Timeout" and clearpass reject all request with "Failed to classify request to service".

Does anyone know what could happen ?

Regards,