Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

VRRP controllers - ClearPass RADIUS NAS IP

This thread has been viewed 2 times

  • 1.  VRRP controllers - ClearPass RADIUS NAS IP

    Posted Jun 27, 2016 12:56 AM

    Hi Airheads,

     

    What is the best practice approach to defining ClearPass servers on a VRRP pair of controllers - specifically NAS IP? 

     

    The controller has each ClearPass Pub / Sub defined using a common key, the RADIUS source interface is the Management interface of the controller.

     

    ClearPass has each controller defined by Management IP address, with the common RADIUS key.

     

    All is working OK, but there is a warning in the logs because the controller is sending its VRRP address as the NAS IP:

     

    ERROR Common.NadClientTable - getNadClient: Unknown NadClient <Controller VRRP address>



  • 2.  RE: VRRP controllers - ClearPass RADIUS NAS IP
    Best Answer

    EMPLOYEE
    Posted Jun 27, 2016 01:47 AM
    Define each ClearPass server plus the VIP as NADs in ClearPass.