Hi,
our setup with CX-Switches 10.16 works well with client ip tracker and also interim accounting.
the challenge is : use information that is already there and write it into clearpass´endpoint db - aka "profiling".
endpoints with static ip addresses are well visible, also via #show port-access clients dhcp-info command.
according to a previous thread dfp - device fingerprinting should do the trick
Security
| Hpe |
remove preview |
|
| Security |
| Hi World,The endpoints in this scenario configured with static ip and layer 3 device (fw) doesn't support the necessary snmp OID which is required for the Clear |
| View this on Hpe > |
|
|
but applying a dfp profile with dhcp options does not generate valuable entries, neither at the switch level (#show client device-fingerprint), nor subsequent at clearpass.
my second approach was : use framed-ip-address, which is also already there (appears in access tracker within accounting details) to feed endpoint db. but got no idea on how to ... ?