Aruba 2930F Tunneled Port Clearpass Roles

[Leon123]

Hi,

I´ve set up a 2930F Switch for testing port tunneling. 

The Switch has firmware WC.16.05.0004.

The Controller has code verson 6.5.4.3 on it, for authentication I use Clearpass 6.7.

The tunnel comes up and the authentication works fine, but the controller ignors the radius response attriubte send from clearpass.

The controller set always its default role.

Have anyone an idea where the problem is?

Thanks

[cappalli · Accepted solution]

You should not be using Enforce Machine Authentication when using ClearPass. Disable that.

[cappalli]

Does that role exist on the controller?

[Leon123]

yes

[cappalli · Accepted solution]

You should not be using Enforce Machine Authentication when using ClearPass. Disable that.

[Leon123]

Thanks, now it works.

[Anonymous]

@Leon123, what licensing did you need to use for the tunnelled port?

[cappalli]

Per-Port consumes 1 of each controller licenses for each switch stack.