Higher Education

Reply
This is an open group. Sign in and click the "Join Group" button to become a group member and start posting.
Highlighted
Frequent Contributor I

ClearPass Multiple entries in the access tracker

What are the possible causes of multiple user entries on the access tracker?

 

-There is only one entry in the controller user-table

- The user only tried to connect once

- The entries are within seconds

9 REPLIES
Guru Elite

Re: ClearPass Multiple entries in the access tracker

Are they apple devices? 


Thanks, 
Tim

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Frequent Contributor II

Re: ClearPass Multiple entries in the access tracker

I see this happen with iPads and iPhones.

Scott McNeil - Sr. Network & Security Engineer, Global Process Automation
Network+ | CWNA | CWTS | ACSP | ACMP | ACMA | BREC
Frequent Contributor I

Re: ClearPass Multiple entries in the access tracker

Yes all apple devices.

 

Macbook Pro

Mackbook Air

 

Contributor II

Re: ClearPass Multiple entries in the access tracker

Do you have 'Profile Endpoints' checked in the Service?

We have [Aruba terminate Session] on for the profiler for any device.

Frequent Contributor I

Re: ClearPass Multiple entries in the access tracker

Currently there is no problem reported but i want to be proactive :)

Guru Elite

Re: ClearPass Multiple entries in the access tracker

There's very little explanation as to why this happens with Apple devices. Nothing to worry about though. 


Thanks, 
Tim

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.

Re: ClearPass Multiple entries in the access tracker

Do you have AirGroup enabled? Those checks ap[pear in Access Tracker too.


Bruce Osborne - Wireless Engineer
ACCP, ACMP

All opinions written here are my own and do not necessarily reflect the views and opinions of my employer or Aruba Networks

Frequent Contributor I

Re: ClearPass Multiple entries in the access tracker

Yes i do have Airgroup enable too. Strange i tried to replicate the issue several times with iphone, ipad, macbook pro, and macbook air and clearpass show only 1 entry. Now it does not happen often but sometimes you look a user on the access tracker and have multple entries for some reason within seconds.

 

Options

It could be the client driver is aggresively sending a deauth to the AP and roaming to another AP within seconds and dauth again roam back to the AP. (This will cause the multiple entries in the access tracker because the client is indeed auth multiple times)

 

I am debugging the user in the controller and see if there is a dauth from the client or AP. I will update my findings.

 

 

Guru Elite

Re: ClearPass Multiple entries in the access tracker

Also keep in mind that the AirGroup authorization requests will look
completely different and hit a different service as they're from the
controller to ClearPass, not the client to ClearPass.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: