I combined some generic knowledge about ClearPass with generic knowledge about ILO.
From here you can learn that the ILO and management port are on the same physical network interface. Another similar reference here.
Then you can see as well that the C2000 is based on HPE DL20 gen 9 hardware and that means that the ILO is just the ILO that is on these servers.
Then I know that if you have that, that the ILO and the server itself (so ClearPass) from a networking perspective are like two devices on a switch, so two MAC addresses.
From there I searched for 'HP ILO tagged VLAN' in a search engine and that popped up the information on how to enable VLAN tagging on the ILO port.
I didn't see an actual document combining all the same. I could not test it either as I don't have the appliance, but based on the documentation it should work as described. Please let us know if you were successful, and possibly document the steps on how to get there.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------
Original Message:
Sent: Dec 18, 2020 04:19 AM
From: Nebojsa Markovic
Subject: Clearpass C2000 appliance
Hi Herman,
Is this (Mgmt/ILO on the same port) documented somewhere publicly available, or is it just general knowledge amongst engineers?
------------------------------
[NesaM - ACMP|ACCP|ACDP]
------------------------------
Original Message:
Sent: Dec 17, 2020 06:33 AM
From: Herman Robers
Subject: Clearpass C2000 appliance
ClearPass management IP and ILO IP can be in different subnets, but will be on the same port. You can configure a secondary IP subnet on the VLAN where the appliance is connected and then make both reachable. Alternatively, I haven't tried but it seems possible, configure the ILO to use a tagged VLAN. In that case, the switch port connecting to the ClearPass eth0 will have the ClearPass management network untagged and the ILO vlan tagged; but you will need to configure the ILO to use a VLAN tag first.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.