Higher Education

What are the possible causes of multiple user entries on the access tracker?

 

-There is only one entry in the controller user-table

- The user only tried to connect once

- The entries are within seconds

Are they apple devices? 


Thanks, 
Tim

I see this happen with iPads and iPhones.

Currently there is no problem reported but i want to be proactive :)

Yes all apple devices.

 

Macbook Pro

Mackbook Air

 

There's very little explanation as to why this happens with Apple devices. Nothing to worry about though. 


Thanks, 
Tim

Do you have 'Profile Endpoints' checked in the Service?

We have [Aruba terminate Session] on for the profiler for any device.

Do you have AirGroup enabled? Those checks ap[pear in Access Tracker too.

Yes i do have Airgroup enable too. Strange i tried to replicate the issue several times with iphone, ipad, macbook pro, and macbook air and clearpass show only 1 entry. Now it does not happen often but sometimes you look a user on the access tracker and have multple entries for some reason within seconds.

 

Options

It could be the client driver is aggresively sending a deauth to the AP and roaming to another AP within seconds and dauth again roam back to the AP. (This will cause the multiple entries in the access tracker because the client is indeed auth multiple times)

 

I am debugging the user in the controller and see if there is a dauth from the client or AP. I will update my findings.

 

 

Also keep in mind that the AirGroup authorization requests will look
completely different and hit a different service as they're from the
controller to ClearPass, not the client to ClearPass.