Security

Reply
hc
New Contributor

DHCP relay vs Device fingerprinting (ArubaOS-Switch) in ClearPass profiling

Hello,

 

Is there any difference in the information that the ClearPass obtains between DHCP relay method and Device fingerprinting feature on ArubaOS-Switch?

 

Thank you.

Aruba Employee

Re: DHCP relay vs Device fingerprinting (ArubaOS-Switch) in ClearPass profiling

I believe this feature was added in AOS-S 16.06 version. Once you have configured the switch

  • to use ClearPass as RADIUS server,
  • "radius-server cppm identity"
  • device-fingerprinting policy

then the switch after the fingerpint analysis will send the info to ClearPass. This will not replace the DHCP relay (IP helper) functionality but is in addition to it.

Frequent Contributor I

Re: DHCP relay vs Device fingerprinting (ArubaOS-Switch) in ClearPass profiling

When you config CPPM as secondary DHCP IP helper-address then CPPM can do device fingerprint using DHCP request detail.

Guru Elite

Re: DHCP relay vs Device fingerprinting (ArubaOS-Switch) in ClearPass profiling

DFP on AOS-Switch is designed for static devices. You should continue to use DHCP finerprinting with DFP.


| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
New Contributor

Re: DHCP relay vs Device fingerprinting (ArubaOS-Switch) in ClearPass profiling

Would it be a problem to add this to each switch port? Because in some cases you cannot be sure on what port static clients are patched...

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: