Wireless Access

Reply
New Contributor

Wireless Controller with two different Radius auth sources(Clearpass and ISE)

Hi,

 

a bit of an interesting request. We have a controller at one of our local sites(ties back to the master at our main office) which supports about 50 AP's, uses local vlans/subnets and calls in to Clearpass for Radius,OnGuard.. typical communication for our SSID's. One of our local groups at that site(different networking group with another network) wants to use our Aruba solution(call it the business infrastructure) for wireless(so AP and Controller), but have their communication(Radius auth) tie back in to ISE, as it is the solution they are using, when connecting to a different SSID, 

 

I am unsure if I am making any sense, but they basically are asking if a single aruba controller can support both Clearpass and ISE simultaneously depending on which SSID they connect to. If they connect to our "Business" SSID, they get connected through Clearpass and expected behavior is followed. If they decide to connect to "Not Business", ISE is the one answering the Radius request and handles authentication. Considering this is a local controller, I don't see this being possible. 

 

Any thoughts on this potential scenario?

 

Thanks!

Guru Elite

Re: Wireless Controller with two different Radius auth sources(Clearpass and ISE)

It is possible.  This is how a "SSID" is constructed:

 

Virtual AP

   SSID Profile

   AAA proifile

     Server Group

 

In your scenario you would just have a different Virtual AP Different SSID profile, different AAA profile and a different server group.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
New Contributor

Re: Wireless Controller with two different Radius auth sources(Clearpass and ISE)

Thanks for the quick reply!

The more I thought about it, the more it made sense it could be done.

Thanks for confirming .

Have a great weekend

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: