Yup, very true. DHCP is a wealth of knowledge. SPAN-based profiling tools are your friend here for static IP devices.
Original Message:
Sent: Jun 10, 2024 09:42 AM
From: Canesniffer
Subject: CPPM profiling without Dhcp option
I am still learning myself, but in my experience. 90% of valuable profiling information comes from DHCP with the helpers. I doing SNMP "Network Scans" in tandem with NMAP "Subnet Scans" with the SNMP scans able to read the ARP table may tie the Static Addresses to the clients for even better profiling. But being able to Fill out the Device Fingerprints effectively is Best with the DHCP Helpers. There may be significant Fingerprint Rule generation required for your use case of static IP devices.
All of this is said with the hopeful correction by someone smarter than me. But Static IP devices have always been a bane for me.
Original Message:
Sent: Jun 09, 2024 06:16 PM
From: amr.ragab@linux-plus.com
Subject: CPPM profiling without Dhcp option
thank you i tried the snmp way but still not getting all the info I need like device category and os, etc... I even changed the SNMP options in the server configuration and made the poll trigger for 10 minutes but still the endpoints don't update.
the accounting is working well between switch and cppm but the only issue I have now that profiling static devices.
Original Message:
Sent: Jun 09, 2024 10:16 AM
From: cjoseph
Subject: CPPM profiling without Dhcp option
I hope this helps: https://www.arubanetworks.com/techdocs/ClearPass/6.12/PolicyManager/Content/CPPM_UserGuide/PolicyProfile/Collectors.htm
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
Original Message:
Sent: Jun 09, 2024 06:46 AM
From: amr.ragab@linux-plus.com
Subject: CPPM profiling without Dhcp option
hi all,
I am concerned about Clear Pass's profiling, how can I profile devices without an IP helper as those endpoints will have static IPs not dynamic ?