Security

 View Only
last person joined: 2 days ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass wired 802.1x with Huawei CE5731 Switches

This thread has been viewed 21 times

  • 1.  Clearpass wired 802.1x with Huawei CE5731 Switches

    Posted Nov 25, 2022 07:52 AM
    Hello all,

    we are currently testing Huawei CE5731 switches with Clearpass 6.10.5.185484.
    Wired 802.1x now works with the switch without any problems.
    We would like to give the switch the user VLAN in the profile with radius attributes, there is a document from Huawei for this. It was also configured this way, unfortunately the switch does not switch the VLAN.

    Here the Config:

    we also tested this config:


    Maybe someone has another idea

    Thanks a lot

    Many greetings

    ------------------------------
    Tobias
    ------------------------------


  • 2.  RE: Clearpass wired 802.1x with Huawei CE5731 Switches

    EMPLOYEE
    Posted Nov 27, 2022 09:44 PM
    the RADIUS attributes are the classic IETF ones that all the vendors should support.
    perhaps you are missing some switch command . Hope the link below helps

    https://support.huawei.com/enterprise/en/knowledge/EKB1000064168

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------

    Original Message


  • 3.  RE: Clearpass wired 802.1x with Huawei CE5731 Switches

    EMPLOYEE
    Posted Nov 28, 2022 09:39 AM
    You should use the RADIUS enforcement to return the VLAN during the authentication.
    The RADIUS_DynAuthZ is a 'Change-of-Authorization' or 'Dynamic Authorization' or 'RFC3579' (which all is different names for the same).

    Make sure the VLAN is configured on the switch, and check logging to possibly see why the attribute is not assigned.

    Also, make sure that your service is not in 'Monitoring mode' because it will not actually return attributes in that mode.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 4.  RE: Clearpass wired 802.1x with Huawei CE5731 Switches

    EMPLOYEE
    Posted Nov 28, 2022 04:35 PM
    Herman is referring to the enforcement profile type.



    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------

    Original Message