Controllerless Networks

Frequent Contributor I

IAP dynamic VLAN assignment from clearpass

I have an instant cluster and I want to assign a vlan to a client from clear pass.   I am thinking this is done with the dynamic vlan settings.   is there a document that describes the different settings and what clearpass needs to sent to set it?   I just want clare pass to send back a vlan number and put the devices in that vlan.   Also if that vlan is not present in the IAP cluster what happens (say clearpass sends back vlan 10 yet vlan 10 is not at the site, will it go to the default vlan?).


running code.  

Guru Elite

Re: IAP dynamic VLAN assignment from clearpass

You can return the aruba-user-vlan radius attribute: derivation.htm?Highlight=aruba-user-vlan


If that VLAN does not exist, it will set it to the default VLAN set.

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.4 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
Sign up for Security Alerts
Aruba Technical Webinars
Frequent Contributor I

Re: IAP dynamic VLAN assignment from clearpass

is there a way to see what is being sent from clearpass? on the campus controller I debug authmgr but not sure how/what debug to run on the IAP. The clearpass guy says he is passing the Aruba-User-Vlan . here is what I have configured in the IAP:


Assign Vlan returned as vlaue of Aruba-User-Vlan

Default VLAN: 190


when I connect up with this setting I look in the controller and show associations and the client has vlan 190 but doesn't get an ip address.   if I just have it set to static he gets and ip in vlan 190 and shows to be in vlan 190.    





Search Airheads
Showing results for 
Search instead for 
Did you mean: