Security

last person joined: 19 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass Radius Authentication Source based on Zone

This thread has been viewed 2 times

  • 1.  Clearpass Radius Authentication Source based on Zone

    Posted Mar 21, 2017 07:30 PM

    Hello, I have a Clearpass cluster with a publisher and two subscribers. Both subscribers are in their own zones and I would like to configure it in such a way that devices authenticating a specific zone will use its local authentication source first. I can't seem to find an easy way to configure this without having to create 3 different services and doing something manual like using device groups to map devices to each service. Thoughts? Ideas? Much appreciated. 

     

    Thanks!, 

     



  • 2.  RE: Clearpass Radius Authentication Source based on Zone

    EMPLOYEE
    Posted Mar 21, 2017 07:45 PM
    What is the authentication source?


  • 3.  RE: Clearpass Radius Authentication Source based on Zone

    Posted Mar 21, 2017 07:47 PM

    Authenticating to AD servers via LDAPS



  • 4.  RE: Clearpass Radius Authentication Source based on Zone
    Best Answer

    EMPLOYEE
    Posted Mar 21, 2017 07:50 PM
    On each subscriber, configure the local DCs as password servers.


    http://www.arubanetworks.com/techdocs/ClearPass/6.6/PolicyManager/Content/CPPM_UserGuide/Admin/ServerConfig_addpwdserver.htm


  • 5.  RE: Clearpass Radius Authentication Source based on Zone

    Posted Mar 21, 2017 08:11 PM

    Ok so I can have a single service for all of my devices with all of the AD servers added as authentication sources. Then configure the subscribers with this password server list of the local servers only?