Cloud Managed Networks

 View Only
  • 1.  Endpoints not getting profiled in ClearPass - Aruba Central SSID

    Posted Aug 17, 2024 07:32 PM

    I have a new SSID created in Aruba Central for testing. I have a device that connects to the SSID via 802.1x. I have profiling enabled on the service and yet the endpoint remains unprofiled in ClearPass. It should get profiled at that most basic level but it says "Profiled = No" in ClearPass. What could I be doing wrong, there is not much configuration I have done besides a basic 802.1x wireless service with Profiling enable. Accounting is enabled and working.



  • 2.  RE: Endpoints not getting profiled in ClearPass - Aruba Central SSID

    Posted Aug 18, 2024 01:13 AM

    Hi.

    Did you direct dhcp relay to clerpass server? Or did you enable Aruba Central Device Insight integration with Clearpass?

    If Clearpass can't receive data about the client, it can't profile it.

    Look int Clearpass profiling how to to get an idea. 

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------



  • 3.  RE: Endpoints not getting profiled in ClearPass - Aruba Central SSID

    Posted Aug 18, 2024 11:24 AM

    Hi Gorazd, looks like DHCP relay was not working but I have fixed it and now the endpoint is getting profiled. Question - can profiling work with just an OUI lookup? ClearPass already saw the OUI and knew the vendor (Apple) but it still did not profile. After reading the guide, OUI lookup should count for something. At the very least it should have been profiled as "Unknown".

    Thanks.




  • 4.  RE: Endpoints not getting profiled in ClearPass - Aruba Central SSID

    Posted Aug 19, 2024 07:55 AM

    Hi.

    Not much use from OUI unfortunatelly. With passive profiling your options are rather limited. but in most cases provide enough information. If you also use active profiling then you can have more accurate information but it require more time and resources. On Aruba switches you can also use switch client profiling to gather relevant information.

    Best, Gorazd 



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------