Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass - failsafe process

This thread has been viewed 0 times

  • 1.  Clearpass - failsafe process

    Posted Mar 27, 2018 08:36 PM

    Hi,

     

    I have an Aruba 54xx switch with port A10 configured as untag on vlan 10. This is configured within the switch configuration.

     

    A device connects, initiate the whole things with ClearPass, and Clearpass pass back a radius attribute to force port A10 on VLAN 20 instead.

     

     If i am to login into the switch and disable the authenticator, will port A10 go back to VLAN 10, or will it stay on VLAN 20 (the one forced by the Radius attribute).

     

    We are about to kick this off and i am scared that too many devices will end up in the wrong VLAN, i need a very quick rollback plan where i login into the switch and disabling the authenticator will "revert" the vlan settings to what they were originally, not dynamically assigned by ClearPass. 

     

    Would this work?

     

    thanks