Security

Hello all,

What is the maximum ClearPass Access Liceneses that we can put on a C1000 physical appliance. I have read that it support both 500 and 1000 active sessions. The ClearPass appliance is used as a RADIUS ORPS.  

I had to look up what ORPS is and posted it here as a reference:

• ORPS (Organisational RADIUS Proxy Server): The server at every organisation that participates in eduroam, which takes any eduroam requests that are not local to its home organisation and proxies them to the NRPS, and also receives requests for authentication from the NRPS.

There is no limit on the number of access licenses that you can put on any ClearPass appliance, however, each appliance has a scaling of concurrent sessions and authentications per second that you should not exceed. It does not make sense to add more licenses than your hardware can handle.

if we have cluster of two c1000 appliances (that supports up to 1K concurrent sessions), then can we use 2K access license so that each appliance can handle 1K ?

Yes, you can do that. You can put as many licenses on a cluster as you like, just make sure the hardware has enough capacity to support the concurrent sessions and auths per second as described in the document linked above..

If you don't hit the authentication/second limits or other metrics in the scaling guide and you have a way to distribute the clients over the two appliances, you can go to 1000+1000 concurrent if you have at least 2000 Access Licenses.

Thanks a lot..