Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Authenticate admin network of cppm by a external RADIUS.

This thread has been viewed 1 times

  • 1.  Authenticate admin network of cppm by a external RADIUS.

    Posted Jul 20, 2015 09:37 AM

    Hello,

    Actually it is not possible to authenticate the admin networks of Clearpass by an external TACACS serveur.

    But my client wants to centralize admin authentication on his ACS server.

    Is it possible to use an exetrnal RADIUS server (i.e : ACS) for authenticate the admin networks of Clearpass ?

    I try to do it after have add :

     

    • First add authentification source RADIUS
    • Second add RADIUS Generic service

    Unfortunately, that doesn't work... probably bound to service rule ..

    Have you an idea ?

    Regards

     

    Yann

     

     



  • 2.  RE: Authenticate admin network of cppm by a external RADIUS.

    Posted Sep 13, 2015 02:28 PM
    @Yann Dorval wrote:

     

    Actually it is not possible to authenticate the admin networks of Clearpass by an external TACACS serveur.

     

    it seems that way, but perhaps someone else has a direct solution.

     

    my approach would be to use the default service for CPPM access: [Policy Manager Admin Network Login Service] at authentication you can add a RADIUS server as source, just use the ACS there.

     

    also, you probably already suggested this, why not replace the ACS with ClearPass?



  • 3.  RE: Authenticate admin network of cppm by a external RADIUS.

    Posted Jul 25, 2019 06:54 AM

    Can you please let me know how to configure external Radius server for cppm login authentication and how to configure snmp string for polling the data, status of CPPM Server. I am using 6.7.9 version.