Occasional Contributor II

Aruba Clearpass user roles best practice



is there any best practice for vlan assignemnt in user roles?


Lets say i want to create multiple user role based on the authentication attribute like BOD, employee BYOD, employe corporate device, contractors, guest, ect


What is the best practice for vlan assignment in multiple use roles? 


I have a plan to use only two vlan : 1 for guest and one for employee.


So i would like to use only one vlan for multiple user roles for employee, and one vlan for contractor and guest user role, with different acl/firewall rules for each user role. is that good or should i assign one vlan per user role?



Guru Elite

Re: Aruba Clearpass user roles best practice

Yes, that's a pretty standard deployment.

| Tim Cappalli | Aruba Security | @timcappalli | |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Search Airheads
Showing results for 
Search instead for 
Did you mean: