Security

Reply
Highlighted
Frequent Contributor I

Clearpass: Unknown NadClient, Mobility Master seems to be an authenticator

Hi,

 

Im just testing the Clearpass and I get a strange issue.

When a device trying to authenticate the Clearpass log shows ther error

"Unknown NadClient <ip-address>" where ip-address is the address from our Mobility Master and this is the strange part.

The authenticator should be our md (7220 controller) and not the mobility master.

 

What could cause the error? Some configuration error?

 


Accepted Solutions
Highlighted
MVP Expert

Re: Clearpass: Unknown NadClient, Mobility Master seems to be an authenticator

If it is part of a cluster define the Cluster VRRP-VIP for each MD as the “ip radius nas-ip”

If is not part of a cluster than use the MD management IP

Make sure you add all those IPs (mgmt IP and Cluster VRRP-VIPs as RADIUS clients)

Sent from Mail for Windows 10
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA

View solution in original post


All Replies
Highlighted
Frequent Contributor I

Re: Clearpass: Unknown NadClient, Mobility Master seems to be an authenticator

I think I solved the error.

I made a packet capture showing me that the nas-ip-address is the address from the mobility master.

 

I configruerd: configuration-->authentication-->advanced on device level an entered the ip from the respective md.

 

Now the nas-ip-address is the address from the md

Highlighted
MVP Expert

Re: Clearpass: Unknown NadClient, Mobility Master seems to be an authenticator

If it is part of a cluster define the Cluster VRRP-VIP for each MD as the “ip radius nas-ip”

If is not part of a cluster than use the MD management IP

Make sure you add all those IPs (mgmt IP and Cluster VRRP-VIPs as RADIUS clients)

Sent from Mail for Windows 10
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA

View solution in original post

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: