Security

 View Only
last person joined: 21 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clear Pass 6.10 to 6.12 - MAC Auth Reject

This thread has been viewed 8 times

  • 1.  Clear Pass 6.10 to 6.12 - MAC Auth Reject

    Posted 21 days ago

    Hello, I just tried to migrate Clear Pass 6.10 to 6.12.


    What I've done so far:

    • setup new 6.11 vm (new IP / new FQDN / new domain join)
    • restore existing backup from 6.10 to 6.11
    • upgrad from 6.11 to 6.12
    • create new certificate for radius / https

    After these steps I changed the existing switch config from a test switch in the lab to the new fqdn - noting more.

    I connected a known device, which is using MAC-Auth and I get "reject".. 


    The MAC is known, I also see the group name I configured with the old 6.10 version



  • 2.  RE: Clear Pass 6.10 to 6.12 - MAC Auth Reject

    EMPLOYEE
    Posted 21 days ago

    Please share what's in the Alerts tab. If there is a reject, the Alerts tab will in general provide you more information on why the reject was sent.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 3.  RE: Clear Pass 6.10 to 6.12 - MAC Auth Reject

    EMPLOYEE
    Posted 21 days ago

    Looks like service categorization failed since there isn't anything in the policies portion of that screenshot.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------

    Original Message