Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

802.1x on IAP and Clearpass

This thread has been viewed 2 times

  • 1.  802.1x on IAP and Clearpass

    Posted Jul 09, 2017 02:09 AM

    Hi,

    Our customer wants to create 802.1x on Aruba IAP with an external radius "ClearPass". At the site we have one Domain controller for several companies and each company have an Organization Unit (OU) in the domain controller, example: OU="Company1" and OU="company2", what customer want is that he wants to create only 1 ESSID in the whole building, and in case the employee is in OU="Company1" he will be assigned an IP from VLAN 20  in case the employee is in OU="Company2" he will be assigned an IP from VLAN 30.

    Please advise if this is doable?

    I highly appreciate your support.



  • 2.  RE: 802.1x on IAP and Clearpass

    Posted Jul 09, 2017 03:37 AM

    Yes this is quite doable. Please refer to below post:

     

    https://community.arubanetworks.com/t5/Security/active-directory-organisational-unit-with-clearpass/td-p/212441



  • 3.  RE: 802.1x on IAP and Clearpass

    Posted Jul 09, 2017 04:27 AM
    Hi Jaybee,
    Thank you, so in that way I can configure different profiles and map them to different Active directory OUs?



  • 4.  RE: 802.1x on IAP and Clearpass

    Posted Jul 09, 2017 04:45 AM

    Thats correct. You will configure a single enforcement policy out of these profiles and assing them to the ClearPass service.



  • 5.  RE: 802.1x on IAP and Clearpass

    Posted Jul 09, 2017 04:52 AM
    Thanks alot Jaybee