Security

Dear Experts, 

One of the customer has 5130-EI switches and they are integrating them with Clearpass. They want to know that before they enable the ports for 802.1x, is there anyway to test the dot1x/AAA from comware to make sure its properly communicating with Clearpass through Radius?

Like we have AAA diagnositics in Mobility controller, anything similar in comware switch (v7)

No and Yes. Configure one port for dot1x and test on it. You can also use simulation option in Clearpass to see if role mappings and enforcement profiles are working as expected. Usually I didn't have problems with Comware and Clearpass switches. Check with Wired Enforcement Solution Guide for specifics on Comware and Clearpass side.  

Best, Gorazd

Hi @Ronin101.

Yeah I feel your pain. The answer is no. There is no inbuild test for AAA in Comware 7. At least I don't know for any. I'm checking on 5140 but can't see any option to do it. Here is an old Atmosphere'17 presentation on Comware and Clearpass integration. No mentions of AAA tests inside Comware :-(.

Best, Gorazd