DHCP relay vs Device fingerprinting (ArubaOS-Switch) in ClearPass profiling

[hc]

Hello,

Is there any difference in the information that the ClearPass obtains between DHCP relay method and Device fingerprinting feature on ArubaOS-Switch?

Thank you.

[ariyap]

I believe this feature was added in AOS-S 16.06 version. Once you have configured the switch

• to use ClearPass as RADIUS server,
• "radius-server cppm identity"
• device-fingerprinting policy

then the switch after the fingerpint analysis will send the info to ClearPass. This will not replace the DHCP relay (IP helper) functionality but is in addition to it.

[Dinusha Chandrasinghe]

When you config CPPM as secondary DHCP IP helper-address then CPPM can do device fingerprint using DHCP request detail.

[cappalli]

DFP on AOS-Switch is designed for static devices. You should continue to use DHCP finerprinting with DFP.

[Signature]

Would it be a problem to add this to each switch port? Because in some cases you cannot be sure on what port static clients are patched...