Two things to have a look at:
- Make sure that your ClearPass Service is not in Monitoring mode (should show a green dot), because in monitoring mode the attributes show up on Access Tracker but are not sent.
- Remove the Role Assignment Rules. The Aruba-User-Role is automatically applied, like the Aruba-User-VLAN.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Nov 29, 2023 01:28 PM
From: Samuel
Subject: Problems assigning dynamic network using CPPM
I have an ssid with 802.1x active and it requests username and password, which must be the AD user
Through the CPPM I establish that when a user connects, it validates which department they are in and, depending on the department, assigns a ROLE. In my Virtual controller, I have defined that it assigns a VLAN according to the ROLE.
The problem is that I see that the CPPM does send the correct instruction but in the VC it assigns me the default user.
I share enforcement capture
I share my Wi-Fi network configuration with 802.1x
