Security

Reply

ClearPass and third-party wireless vendor devices

Hi guys,

 

I understand ClearPass is a multivendor NAC, and because it has more than 100 RADIUS vendor dictionaries, it has no problems related to 802.1X authentication with third-party wireless vendor devices such as Cisco, Ruckus, Fortinet and so on. But whan happens with features such as profiling, OnBoard and OnGuard? Does it have some problems with third-party vendors (only wireless, no switches)? There is no documentation about this. Does anyone have experience with ClearPass and third-party vendors and profiling, OnBoard and OnGuard?

 

Regards,

Julián

Guru Elite

Re: ClearPass and third-party wireless vendor devices

OnGuard runs in overlay mode so the only optional piece is support for RADIUS Dynamic Authorization.

Onboard has no direct dependency outside of captive portal redirection for enrollment (which is optional).

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.

Re: ClearPass and third-party wireless vendor devices

+1 for Tim.

As of profiling, it’s done via multiple methods and they are vendor agnostic.

Perhaps, DHCP fingerprinting profiling isn’t vendor specific. Same for subnet scans, OUI, web agents etc
ACCX #1137, ACMP, BCNE
Satori Internetworking
http://www.net-satori.ca/

Re: ClearPass and third-party wireless vendor devices

Hi guys,

 

So looking at your answers and other posts about this topic, it seems ClearPass is 100% compatible with third-party WLCs and you can get the same capabilities with Aruba and non-Aruba WLCs.

 

Regards,

Julián

Frequent Contributor II

Re: ClearPass and third-party wireless vendor devices

I doubt that MPSK would work with non-Aruba WLCs.

I'm more than happy to be proved wrong as I'd love to use MPSK in my customer's 4-vendor environment!


@fjulianom wrote:

Hi guys,

 

So looking at your answers and other posts about this topic, it seems ClearPass is 100% compatible with third-party WLCs and you can get the same capabilities with Aruba and non-Aruba WLCs.

 

Regards,

Julián


 

Guru Elite

Re: ClearPass and third-party wireless vendor devices

Aruba MPSK is a feature of Aruba controllers and IAPs.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.

Re: ClearPass and third-party wireless vendor devices

Yes, MPSK is a feature of ArubaOS 8 and has nothing to do with ClearPass.

Regards,
Julián
Guru Elite

Re: ClearPass and third-party wireless vendor devices

Not exactly true. It requires ClearPass.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.

Re: ClearPass and third-party wireless vendor devices

Oops, I didn't know it...

 

Regards,

Julián

Re: ClearPass and third-party wireless vendor devices

Hi Community.

I have to deploy a ClearPass in a mixed environment, where the customer has many other AP&Controller vendors (Cisco, Ruckus, Alcatel, etc).

My customer is interested in deploying 802.1x, MAC-Authentication, Captive Portal for Guest Authentication and MFA, so Entry Licenses should be deployed.

What are the requirements of the other vendor APs and Controllers in order the CPPM could be integrated with them and deploy the features mentioned without problems?

 

Regards


PS: If you feel this information is useful and solved your question or problem, please do not forget to mark it as a solution and give me some kudos.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: