Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass DHCP Relay for Profiling

This thread has been viewed 4 times

  • 1.  Clearpass DHCP Relay for Profiling

    Posted Jan 24, 2019 02:14 PM

    Should the DHCP relays be sent to individual CLearpass IP, or can they be sent to the cluster VIP?



  • 2.  RE: Clearpass DHCP Relay for Profiling

    EMPLOYEE
    Posted Jan 25, 2019 07:57 AM

    I think either will work. There is some information on redundancy in the ClearPass Profiler Tech Note. Most examples point to the node address which in larger clusters allows the packet to be sent to the profiler nodes, but sending to a VIP makes sense as well in my opinion. In fact, the DHCP packet can arrive at any node in the cluster, so just make sure it gets there.