Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).

MAC Vendor not populated for one device

This thread has been viewed 1 times
  • 1.  MAC Vendor not populated for one device

    Posted Apr 23, 2019 08:37 AM

    Hi

     

    A customer running ClearPass 6.7.9 and they have in the enforcement policy the following condition:

    (Authorization:MAB SOURCE SHBMAIN.SHB.BIZ:ou  EQUALS  Accesspoints
    AND  (Authorization:[Endpoints Repository]:MAC Vendor  EQUALS  Hewlett Packard Enterprise)

     

    This works fine for all devices except one access point with OUI 808db7.

    All access points with this OUI get the MAC vendor attribute populated with Hewlet Packard Enterprise excep one specific AP.

     

    Due to the missing value in the attribute the authentication fails. Is this a know issue?

     

    I have seen this post:

    https://community.arubanetworks.com/t5/Security/CPPM-not-receiving-client-mac-vendor-from-some-devices/m-p/511686

    But it looks as this one is related to an older version of ClearPass.