Does the IAP support 215 downloadable roles (DUR) of Clearpass?

[epsarias]

I thought I mentioned it, my bad.

I initially tried with 6.7.8 and yesterday upgraded to 6.8.0 (latest), same results.

[cappalli]

Downloadable User Roles are supported starting in Instant 8.4.0. On the ClearPass side, advanced mode must be used.

[epsarias]

Hi Tim,

Yes, the DUR profile has been created using the advanced mode, Mobility Controller template and syntax such as: Aruba-CPPM-Role = user-role ABC vlan xxx 

All products involved run the latest codes, and I even imported CPPM's signing CA certificate to the VC's trusted zone, similarly to how it's needed on the Aruba switch side.

Anything obvious I'm missing, that would cause the error seen on Instant, even though CPPM applies the proper enforcement policy?