Security

 View Only
Expand all | Collapse all

Using SHL in Clearpass Services Condition

This thread has been viewed 6 times
  • 1.  Using SHL in Clearpass Services Condition

    Posted Oct 26, 2023 10:18 AM

    Hi Guys,

    I would like to know if by any way I can group several SHL in order to gather them in the same matching condition in a 802.1x service. The idea is to restrict this service to a same type of device.

    Currently  I do it but I need to select "Any" of the condition and  I set only "Connection-Client-Mac-Address Belongs to group SHL Value" and I add as many condition as I have SHL

    What I would like is to change "Any of the condition" to "All of the condition", group all of mac address conditions in one and associate this one with some others.



    ------------------------------
    Sebastien
    ------------------------------


  • 2.  RE: Using SHL in Clearpass Services Condition

    Posted Oct 27, 2023 08:59 AM

    As it's not really clear what you want to achieve, it's hard to tell if this works and if it's a good solution. Probably not, as static host lists are deprecated.

    It may be better to work with your Aruba Partner or Aruba Support to validate your design first.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------