Security

 View Only
Back to discussions
Expand all | Collapse all

Clearpass multiple enforcement profiles

This thread has been viewed 19 times

  • 1.  Clearpass multiple enforcement profiles

    Posted Feb 07, 2022 08:16 AM
    Hey,

    I see that it's possible that the same endpoint will receive multiple enforcement profiles.
    I was wondering what will happen if two different enforcement profiles that the endpoint received both have an Aruba DUR as a result. Which one of the two will be sent to the switch via RADIUS?

    Thanks!

    ------------------------------
    Dolev Hasid
    ------------------------------


  • 2.  RE: Clearpass multiple enforcement profiles

    Posted Feb 08, 2022 09:02 AM
    Probably they will be sent both, and the switch will reject that. It's not a valid configuration. For classic switching, you could send different attributes, like VLAN, dACL, QoS from different profiles in the same enforcement policy which then all are sent back and the switch combines them. When using user-roles, sending more attributes will likely break your deployment.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



Related Content