I have been struggling with adding and enrolling CA to aruba AOS-CX swith to connect to clearpass. It's all done in lab environment.
What have I done and tried for so far:
- Created CA sertificate on Clearpass under onboard. Tried both 2048 and 4096 rsa keys. As read somewhere that no all switches can support 4096. Enabled EST on certificate.
- There is screens from CA : https://prnt.sc/7wAeEc9_jyOb
- There is screens from switch : https://prnt.sc/hF2pbuDAxdvC
I can't get certificate on switch and start to use TACACS+ or RADIUS as a login etc option, because switch refuse to accept.
Commands used:
1. TA profils
commands:
* crypto pki ta-profile {profile name}
* ta-certificate {copy CA, push ctrl + D}
* exit
2. crypto pki est-profile {profile name}
* vrf default
* url https://{IP or dns name}/.well-known/est/ca:6
* username {login} password plaintext {password}
* exit
3. crypto pki certificate {cert name}
* subject common-name {CN from cert} org {ORG from cert} org-unit {OU from cert} state-or-province {State from cert} locality {Location from cert}
I even tried to only use CN
* key-type rsa key-size (tried both 2048 and 4096)
* enroll enroll est-profile {profile name}
* exit
I'm pretty new to clear pass and aruba networking. Could I be doing something wrong or anybody have some suggestions where are I'm lacking?
Would appreciate any help.
-------------------------------------------