Security

Reply
Highlighted
Occasional Contributor II

Re: Does the IAP support 215 downloadable roles (DUR) of Clearpass?

I thought I mentioned it, my bad.

 

I initially tried with 6.7.8 and yesterday upgraded to 6.8.0 (latest), same results.

Guru Elite

Re: Does the IAP support 215 downloadable roles (DUR) of Clearpass?

Downloadable User Roles are supported starting in Instant 8.4.0. On the ClearPass side, advanced mode must be used.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Occasional Contributor II

Re: Does the IAP support 215 downloadable roles (DUR) of Clearpass?

Hi Tim,

 

Yes, the DUR profile has been created using the advanced mode, Mobility Controller template and syntax such as: Aruba-CPPM-Role = user-role ABC vlan xxx 

 

All products involved run the latest codes, and I even imported CPPM's signing CA certificate to the VC's trusted zone, similarly to how it's needed on the Aruba switch side.

 

Anything obvious I'm missing, that would cause the error seen on Instant, even though CPPM applies the proper enforcement policy?

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: