Wireless Access

We are working on migrating our current 6.x deployment to 8.2.2.4. We are experiencing some rather odd behavior in domain clients connecting to the 802.1x network. We are leveraging ClearPass to determine if the machine is a domain computer. The authentication portion of the network seems to be working without issues. Domain computers are recognized and given their role accordingly, and non domain computers are recognized and assigned the correct role.

The domain computers (Windows 10) gets the correct IP information, dns, etc., but they are not able to leave their VLAN and cannot ping the gateway for their VLAN. We have check ACLs, firewall logs, and router logs but can't seem to find what would cause this.

The non domain computer (MacOS) connected using the same credentials and received the same role as the domain computer, and it is able to access the network without issue. It is also placed in the same VLAN as the domain computer.

This has been rather puzzeling as the normal culprits for things like this (ACLs, firewalls, etc.) don't seem to be causing this. Has anyone come acrosss this odd behavior with ArubaOS 8.x?

You should check you have proper connectivity first, by temporarily removing your rules and putting all 802.1x authenticated devices in the "machine authenticated" vlan.  If that works, we can then move onto looking at the rules and logic in your clearpass service to make sure the rules are being applied correctly.