10-30-2017 06:20 AM
I'm trying to get wired profiling set up between our clearpass server and wired clients. I already have profiling working for my wireless clients.
I have two DHCP relays setup on a test VLAN, one for the DHCP server subnet, and one for the clearpass subnet. I'm receiving DHCP addresses, but not seeing these devices get profield by clearpass.
Does clearpass need the DHCP relay to point directly to clearpass, or can it point to the subnet it is in?
Solved! Go to Solution.
10-30-2017 06:39 AM
The DHCP relay needs to forward client DHCP relay requests directly to the ip address of the ClearPass Box.
*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.4 User Guide
InstantOS 8.3 User Guide
Airheads Learning Videos
Aruba Central Documentation
Sign up for Security Alerts
Aruba Technical Webinars
Re: DHCP Relay for Clearpass profiling
10-30-2017 08:19 AM
Thanks Joseph, that worked out.
Why does the DHCP helper need to point at clearpass instead of the subnet, shouldn't clearpass see the DHCP broadcast when it's relayed to the subnet clearpass resides in?
10-30-2017 10:42 AM
ClearPass needs to receive a unicast, not multi/broadcast packet for the fingerprinting process.
ClearPass Product Manager
-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.