Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Clearpass as a radius server radius accounting server

This thread has been viewed 5 times
  • 1.  Clearpass as a radius server radius accounting server

    Posted Feb 23, 2016 10:51 PM

    Hello

    We are trying to do a integrtation of clearpass for guest, with a Fortigate unit.   So far its working fine, we got the captive portal and everything seems to work just fine, but the RAdius accounting doesnt seems to be working fine.

    When we do the radius account test o the fortigate it fails.   and also we are not looking that the data counters and time  of the guest users does not refresh on the clearpass.

     

    Our question is:

    It is necesary that in the clearpass in his funtion of radius accounting server it tells the NAS that he needs to send the interim intervals for each user?

    The fortigate is configured with the interim intervals of 600secs,  and that devices AVP(Attribute-value pair) is configured in the devices setting in the clearpass, but in the documentation of the vendor, it seems  that the radius accountting server should send this AVP to the NAS with the other attributes of each authenticated user.   

    In each response of the radius each authenticated user should have this AVP

    We are thinking its that way because if we configure a radius server(a windows one) thats the config

    http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD35113&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=12938369&stateId=1

     

    Any Help?

     

    Cheers

    Carlos

     

     



  • 2.  RE: Clearpass as a radius server radius accounting server

    Posted Feb 24, 2016 10:02 AM

    Anyone?



  • 3.  RE: Clearpass as a radius server radius accounting server

    EMPLOYEE
    Posted Feb 24, 2016 10:06 AM

    I think we need a diagram.  Is the fortigate considered the NAS in this situation?



  • 4.  RE: Clearpass as a radius server radius accounting server

    Posted Feb 24, 2016 10:16 AM

    Yes the fortigate is acting as the NAS

     

    Cheers

    Carlos