Security Training

 View Only
last person joined: 4 days ago 

Expand all | Collapse all

Clearpass as IP Helper for DHCP clients on controller

This thread has been viewed 50 times
  • 1.  Clearpass as IP Helper for DHCP clients on controller

    Posted Feb 14, 2022 02:14 AM
    Hi all,

    I just needed to get an understanding as to how clearpass works as an IP helper for DHCP clients on a controller, as on the controller, when defining it for dhcp profiling it takes of the option of it being used as a server.

    Does clearpass have an option to define DHCP scope? If not how do the clients in the vlan get IP?

    Please see attached

    ------------------------------
    champion nweke
    ------------------------------


  • 2.  RE: Clearpass as IP Helper for DHCP clients on controller

    Posted Feb 14, 2022 09:05 AM
    clearpass cannot be used as a dhcp server to assign IP addresses to dhcp clients, ip helper points to clearpass for endpoint profiling.

    ------------------------------
    tan xiaofeng
    ------------------------------



  • 3.  RE: Clearpass as IP Helper for DHCP clients on controller

    Posted Feb 14, 2022 05:49 PM
    Thanks , so based on my image.. how do I use dhcp as a server on the controller for clients in that vlan, as using for dhcp profiling CPPM removes the option for me to use it as server?

    ------------------------------
    champion nweke
    ------------------------------



  • 4.  RE: Clearpass as IP Helper for DHCP clients on controller

    Posted Mar 24, 2022 01:06 AM
    Create interfaces for each VLAN. If the switch is not acting as the router (or does not have Layer-3 capability), the VLANs and interface
    commands must be passed to the router. The IP helper must be identified for the DHCP server and the ClearPass Policy Manager server for the DHCP request in order for the device to be profiled. 
    192.0.2.5 is the DHCP server and will vary based on the local configuration. 192.0.2.10 refers to the ClearPass Policy Manager
    Cisco-switch(config)#interface vlan 333
    Cisco-switch(config-if)# ip address 192.168.33.1 255.255.255.0
    Cisco-switch(config-if)# ip helper-address 192.0.2.10
    Cisco-switch(config-if)# ip helper-address 192.0.33.5
    Cisco-switch(config-if)# exit

    refer to the ClearPass Deployment Guide

    ------------------------------
    David Mendoza
    ------------------------------