Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

minimum network bandwidth for devices connected to Clearpass 5000

This thread has been viewed 1 times

  • 1.  minimum network bandwidth for devices connected to Clearpass 5000

    Posted May 25, 2015 11:25 PM

    Hi all,

     

    Our customer is doing sizing for their lan network with Clearpass 5000. Information provided is that they have a total of 2510 laptops / desktops and 666 printers. 

     

    They have the following enquiries:

    1. With the above devices, what is the comfortable bandwidth per device session with Clearpass.

    2. What is the frequency for post check and how much bandwidth is consume?

     

    Thanks for the help!

     

     

     



  • 2.  RE: minimum network bandwidth for devices connected to Clearpass 5000

    Posted Jun 20, 2015 02:13 PM

    is this only authentication via RADIUS? then the bandwidth is really small, and if you set the session timeout to once every few hours the post first auth remains quite limited also.



  • 3.  RE: minimum network bandwidth for devices connected to Clearpass 5000

    Posted Jun 21, 2015 09:55 AM

    Hi Friend,

    Is this bandwidth requirement for only authentication with CPPM ? or uplink bandwidth limitation.

    if it is for only authentication, required very little bandwidth.

     

    Please feel free for any further query on this.



  • 4.  RE: minimum network bandwidth for devices connected to Clearpass 5000
    Best Answer

    EMPLOYEE
    Posted Jun 22, 2015 07:56 AM

    Hi Venu,

     

    They should be more concerned with latency than bandwidth. If the AD DC is not where CPPM is and the latency from CPPM to AD goes over 150ms, then RADIUS can timeout. This is not a ClearPass or Microsoft AD restriction, but a restriction on how 802.1x is implemented by Microsoft and Apple. If the auth process takes too long, the device drops that request and moves on to the next RADIUS request (it will usually try 3 requests).