Security

Hi,

 

The ClearPass event viewer starts today logging the message "Your subscription has expired, so you can no longer receive updates."

 

Is the ClearPass Subscription ID valid for a period of time? Where can I check that on ClearPass?

 

Thank you.

 

Is that an evaluation subscription ?

 

Or did you purchased this to be valid for certain amount of time ?

Hi Victor,

 

This is a valid license purchased last year with ClearPass via our reseller.

 

Thanks for the response.

 

Regards,

Check admnistration ---> licensing

Hi,

 

In Agents and Software Updates -> Software Updates -> Subscription ID , is the only place where I can see my subscription ID.

 

CPPM 6.0.1.

 

Thanks.

Take a look at the licenses in the Admintration area...what does it say in there?

Hi,

 

I have in the License Summary tab:

Policy Manager: 5000

OnGuard: 0

Guest: 100

Onboard: 0

ClearPass Enterprise: 25

 

In the Servers tab

Policy Manager / Permanent / 5000 / Activated

 

In the the Applications tab

Guest / Permanent / 100 / Activated

 

Thanks.

 

 

Sorry - the subscription ID is valid for as long as your support is valid on Clearpass.  Is your support renewal getting close?

Please contact support and verify your sub ID and your support contract.

Thanks to all of you for your support.

I contacted the support my ClearPass contract support was expired. Problem fixed. 

 

we have upgraded from amigopod hw to clearpass guest, and we have imported all configuration and added all the license, but when we check for updates , we get error msg your subscription id has expired, our support still valid,

 

and i have a problem with my authentication between controller and clearpass,

 

 

any advice

 

thank you

Please contact TAC on the sub ID.

Can you do a test auth between the controller and CPPM.

Double check shared secret on CPPM and the controller

hi,,

each time am tryin to test i got auth fail,

 

i have checked the secret key betwwen them and the ip add and the port,

 

 

for subscription id they gimme the same subscription id but it doesnt work,

 

 

 

Are you seeing the auth request in cppm

yes, on the clearpass i can see radius communication , and i got authentication failedon cppm on monitorin tab with that username and password

i got reject msg

In that service what is the auth source?

Are you authenticating to AD?

What are your settings for the enforcement?

there is no AD, they are guest clients,

 we have controller and on the controller we assigned cppm as radius server ,

and on the clearpass we added arubacontroller as a nac,

 

 

should i create an enformcent for it?

 

Yes you must create an enforcement. You can use the "guest Mac authentication" in the start here section in CPPM

Did you use the service templates to create your services?

but before i create the enforcment , i should be able to test auth from controller to radius ,right?

If you have the correct service being hit and the auth method is correct.

Is your guest account that you created active?

re the subscription id, i had a similar case where even though support was valid, it hadn't been linked to the licensing system and i had to escalate through the TAC to have it resolved. Once i found the right person it was taken care of in minutes.

 

 

If your subscription ID expired, but then was renewed, how do you re-apply it? Does re-applying it require a reboot?

You shouldn't have to do anything. Try re-checking for updates.

Applying a subscription ID does not require a reboot.