Security

Upcoming community maintenance Oct. 27th through Oct. 29th
For more info click here
Reply
Highlighted
Trusted Contributor I

does ClearPass pickup DHCP requests on publisher and subscribers?

couldn't find it for sure although this article* seems to indicate it should, so should a subscriber also pickup DHCP requests send to it and add them to the end point repository?

 

*) http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/What-is-the-limitation-in-ClearPass-for-DHCP-based-profiling/ta-p/216413


Accepted Solutions
Highlighted
Moderator

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

They essentially process them and forward them to the publisher.


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

View solution in original post


All Replies
Highlighted
Moderator

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

They can all process them, but only the publisher can write the info to the database.


Thanks,
Tim


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Highlighted
Trusted Contributor I

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

Tim thanks for the reply. So you are saying that the subscribers can receive them but don't act on them in anyway?

Highlighted
Moderator

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

They essentially process them and forward them to the publisher.


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

View solution in original post

Highlighted
Trusted Contributor I

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

ok, so DHCP requests which via a DHCP relay are send to a subscriber will end up in the endpoint repository (picked up by subscriber then forwarded to publisher which adds it)?

Highlighted
Moderator

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

As Tim eluded to in an earlier post on this thread..... SUBs can receive DHCP forwarded messages, it will however just forward them to the PUB and then the PUB consolidates all this info, which can come from different profiling sources... DHCP, OUI, HTTP-Agent, TCP Fingerprinting, Cisco sensor etc. and then processes this data and uses as discussed in my below technote to come up with a fingerprint that is the most specific and the most 'trust-worthy' and then syn'c this back to the cluster.

 

ClearPass Profiling TechNote V1.1.pdf 


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Highlighted
Trusted Contributor I

Re: does ClearPass pickup DHCP requests on publisher and subscribers?

thanks you both, was confused as it seemed the subscriber wasn't picking up DHCP requests, well nothing got added to the endpoint database. but perhaps i was just a little impatient.

 

will test some more.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: