Security

Reply
Occasional Contributor II

Device Registration and Endpoint repository

Hello , I have a question regarding Device registration .

Our customer has 3000 Laptops purchased every month . We have deployed CPPM 6.7 for Wired NAC . 

 

For PXE boot , MAC address has to be known so we thought of using Static Host list temporarily . But my query is

 

1) if we do device registration , device will go to Guest Device repository ?

2) In MAC Authentication rule for Wired , We have currently defined Authentcation souce as Endpoint repository, so we have to add Guest reposiotry also ? Also Authorization Source is currently Endpoint Repository , so authorization also needs to be updated ?

 

3) Once device  is profiled , will it be updated to Endpoint repository ?

 

4) Can device be removed automatically from Guest Device repository if fix any expiry timer ?

 

 

Highlighted
MVP Guru

Re: Device Registration and Endpoint repository

HI,

 

1) if we do device registration , device will go to Guest Device repository ?

Yes,if you are using guest device registration

 

2) In MAC Authentication rule for Wired , We have currently defined Authentcation souce as Endpoint repository, so we have to add Guest reposiotry also ? Also Authorization Source is currently Endpoint Repository , so authorization also needs to be updated ?

 

Yes

 

3) Once device is profiled , will it be updated to Endpoint repository ?

 

Any devcie which is trying to authenticate will get updated in endpoint repository and if device is profiled those information will also updated in Endpoint.

4) Can device be removed automatically from Guest Device repository if fix any expiry timer ?

 

We dont have cleanup interval option for Guest Device repository

 

Capture.JPG

Regards,
Pavan
If my post address your queries, give kudos and accept as solution!
NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Occasional Contributor II

Re: Device Registration and Endpoint repository

Hi ,

Thanks a lot

For point 4 , we can set an expiry time while adding the device .

So actually it will be cleaned automatically once expired .

I have tested it ,. After expiration time it got deleted automatically after 120 seconds.

MVP Guru

Re: Device Registration and Endpoint repository

Yes , you can set an expiration time when registering the device in the Guest Device Repository



Thank you

Victor Fabian

Pardon typos sent from Mobile
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: