Security

Hi,

Anyone got CPPM 6.X integration with Colubirs Guide ? Anyone? *Not Amigpod..it's not the same gui/guide*

 

please assist me to deploy and make it work...

the guide i found speaking regarding amigopod...and it's dosent helping at all...

 

thanks in advance.

 

me

Anyone Please?

 

Hi

 

I guess you're trying to configure Clearpass Guest. If that's the case, the only significant difference between CPG and Amigopod in terms of networking design is the fact that in CPG 6.0 the service port is used for https and radius traffic. 

 

Apart from that, you just have to configure the "RADIUS" part in CPPM and the web part in CPG. You can look up the details in the following link. http://support.arubanetworks.com/DOCUMENTATION/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=9029

 

I hope this serves you, if not, just tell us where you're having trouble and we'll see how we can help you out.

 

Regards

A.Thanks on the Info.
B.I have issues ,i'am unable to configure an account for the colubris unit to do accounting in front of the CPPM (radius).
...(yes i know&aware amigopod is diffrent world/gui from the CPPM 6.X)...
C.I added the Colubirs as a device (nas) to the CPPM and configure the shared secret on the Colubris itself,but in order to do accounting like it needed on the colubris - i must build a user for that...and there i'm stick - everything else working just fine...

The Doc u sent me got no new info 4 me,and also,dosent contain no info regarding Colubris configuration in front of CPPM. ( I dont have any issue in the ClearPass Guest part...)

This Part - i cannot find where to configure it in the CPPM: (all th rest is fine)

Is there anyone in the world that ever got CPPM to work with Colubris ? an example will be great.

Ok, I think I got it.

 

You no longer configure NAS devices in CPG, that's done in CPPM under Cofiguration > Network > Devices.

 

Please see the attached screen capture.

 

Regards

as I wrote before,already configure it.. But more config is,needed in order to make the colubris unit to be able to do accounting ...

What AP and firmware are you using? I have an older colubris AP I could test here but I need to know the model.

Colubris 3000 | Colubris 3200 <OR SIMILIER> they all working and needing the same config.

or

HP Colubris 710

HP Colubris 720

 

i'm very sad that aruba writing that CPPM supporting more vendors..and when i'm trying to configure it,i'm losing 3 days....because no one on aruba did it before... :(

I understand your frustrations but when the vendor is not longer in business and is now merged with another product its not an easy task for us to show you have to configure another vendors end of life equipment...

 

You have the option to open a case with TAC if you cant get the information from airheads. You need to remember this is a Aruba and customer driven social site where everyone can come and collaborate on ideas, issues etc.

 

TAC is there for you to call 24/7 and get immediate help with Aruba products.

 

The issue you seemed to be running into sounds like you are not able to get accounting information from Colubris.. Is that correct??

 

The equipment I have is a 720 and 330. I was able to setup the AP and send accounting information with no problems. Do you have interim accounting set to true in CPPM?

 

 Go to Administration » Server Manager » Server Configuration 

 

select your CPPM server

 

go to service parameter tab

 

in the dropdown select radius and scroll to the bottom and change the "Log Accounting Interim-Update Packets" TRUE

 

What exacatly are you trying to do?

 

Use CPPM for 

 

1. Guest

2. 802.1x

3. mac auth

 

 

 

 

Hi,
Thanks for the deatiled answer.
I also open a TAC few days ago...(Before i open here post)
Regarding what i'm trying to achive ..is Guest auth... on Colubris 720 unit.

This is the error i'am keep getting when try to log with good user via colubris..:

This is the error in ClearPass

 

You probably check this already but have you tried using 1645 and 1646 for the ports setup instead of 1812/1813

It's not a port issue...the 1812/1813 are configured also in the colubris unit:

and i can see Green light on the colubris unit..so the auth is working...but aint working fine :)

The error you are getting in the access tracker is showing that the auth request is not being classified in a service so it will always send a reject. You need to check your services that you setup in CPPM.

yep, the service classification would be the first issue to solve, the section on AVpairs might be solved by selection the correct dictionaries, CPPM has a lot of them, might be colubirs is there already.