Security

Hi Team ,

Hope you are all doing great !!

I have a wildcard public SSL certificate (*.avege.co.in). I want to configure ClearPass Guest self-registration with a Cisco 9800 WLC.

Both clearpass and cisco controller are running on a secure connection (https)

1. ClearPass FQDN is cppm.avedge.co.in (clearpass IP is Private)

2. Cisco FQDN is Ciscowlc.avedge.co.in ( WLC IP is Private)

3. CN of the Certificate is *.avedge.co.in

4. What FQDN should be in the address field so that HTTPS redirection and guest self-registration work correctly with my wildcard certificate?

5. In the "Address" field of the ClearPass Guest self-registration page (where it asks for the vendor's FQDN, e.g. securelogin.arubanetworks.com), what should I enter for my setup?

6. If my certificate CN is *.avege.co.in, how should I enter this in the Address field? Should it be *.avege.co.in or staravege.co.in?

First, if you're operating against a Cisco environment, then you'll want to change the "Vendor Settings" to Cisco.

Second, the FQDN is whatever DNS entry you have that resolves to the WLC address that is used for authentication.  Or move to Server-initiated and utilize CoA.

Second vote here for server-led with CoA instead. Way cleaner and you only have to manage certificates in one place vs two.