Security

 View Only
last person joined: 19 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Need Clearpass Endpoint IP Address

This thread has been viewed 23 times
  • 1.  Need Clearpass Endpoint IP Address

    Posted 21 days ago

    We are using ClearPass for WIFI SSID authentication(EAP-TLS). Need to capture the endpoint IP address . Can anyone share the procedure and any configuration need to be added in ClearPass.



  • 2.  RE: Need Clearpass Endpoint IP Address

    Posted 20 days ago

    Hi

    You need to enable Radius Accounting to get this information. Radius Accounting are using port UDP 1813 by default.



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP Guru 2024, ACEX, ACDX #1600, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------



  • 3.  RE: Need Clearpass Endpoint IP Address

    Posted 20 days ago

    Is there be any impact for enabling the radius accounting on wlc and in clearpass ?




  • 4.  RE: Need Clearpass Endpoint IP Address

    EMPLOYEE
    Posted 20 days ago

    Nothing that hasn't been accounted for.  Accounting is a normal operation that most operators are going to enable.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 5.  RE: Need Clearpass Endpoint IP Address

    Posted 19 days ago

    Enabled the radius accounting and now able to see the IP Address in the accounting tab. If I need to search a endpoint by a IP address how to do achieve this ?

    Because couldn't see the Endpoint attributes option in the access tracker .




  • 6.  RE: Need Clearpass Endpoint IP Address

    EMPLOYEE
    Posted 19 days ago

    You can create a report using Insight, but searches within ClearPass' Access Tracker (or pretty much any RADIUS server for that matter) is going to be around MAC address and username, not follow-on attributes like IP addresses.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------