Probably they will be sent both, and the switch will reject that. It's not a valid configuration. For classic switching, you could send different attributes, like VLAN, dACL, QoS from different profiles in the same enforcement policy which then all are sent back and the switch combines them. When using user-roles, sending more attributes will likely break your deployment.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Feb 07, 2022 08:16 AM
From: Dolev Hasid
Subject: Clearpass multiple enforcement profiles
Hey,
I see that it's possible that the same endpoint will receive multiple enforcement profiles.
I was wondering what will happen if two different enforcement profiles that the endpoint received both have an Aruba DUR as a result. Which one of the two will be sent to the switch via RADIUS?
Thanks!
------------------------------
Dolev Hasid
------------------------------