Security

last person joined: 19 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Switch management access for AD user through CPPM radius

This thread has been viewed 8 times

  • 1.  Switch management access for AD user through CPPM radius

    Posted Jun 05, 2017 05:49 AM

    Hi,

     

    I want to achieve network switch authententication using AD user credential through CPPM radius.

    While user request for switch authentication AD will only pass authenticated message to CPPM. In cppm we have group of floders as per different rights(Admin, Read only, Network L1 access). Authenticated User will get access as per the group.

     

    Can some one please share KB url

    Thank You..



  • 2.  RE: Switch management access for AD user through CPPM radius

    EMPLOYEE
    Posted Jun 05, 2017 07:32 AM

    Hi,

     

    Follow below article

     

    https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-authenticate-Management-users-of-Mobility-Access-Switch/ta-p/187650

     

    Regards,

    Pavan

     

    If my post addresses your query, give kudos:)



  • 3.  RE: Switch management access for AD user through CPPM radius

    Posted Jun 05, 2017 07:51 AM

    Hi Pavan,

     

    I am looking for Radius authentication not Tacacs.



  • 4.  RE: Switch management access for AD user through CPPM radius

    EMPLOYEE
    Posted Jun 05, 2017 11:18 AM

    Hi,

     

    Instead of TACAS enforcement service use Radius enforcemnet service and try send proper role in enforcment profile.

     

    Regards,

    Pavan



  • 5.  RE: Switch management access for AD user through CPPM radius
    Best Answer

    EMPLOYEE
    Posted Jun 06, 2017 03:18 AM

    What may help is check the videos on this page: https://community.arubanetworks.com/t5/Security/Aruba-ClearPass-Workshop-Video-series/td-p/291597

     

    And then more specific the Admin Access section:

    Those videos have examples for both TACACS+ and RADIUS for Admin access, and may help you to get started with your own switch access (if different than Provision/ArubaOS Switches).