Aruba Apps

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

Hi Jainmanu.

You should send session timeout attribute to set the time when session need to be reauthorized. Then you can check in Clearpass if session can proceed/be reauthorized or need to be terminated.

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

any idea what enforcement policy i need to configure ?

Hi Jainmanu.

You should send session timeout attribute to set the time when session need to be reauthorized. Then you can check in Clearpass if session can proceed/be reauthorized or need to be terminated.

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

Hi Jainmanu.

You should send IETF Session Timeout in seconds. 

You have several options. 

Simplest one is to send fixed number of seconds to reauthorize the session and then you can check in Clearpass, if it is expired.

You can calculate how many seconds is to the end of allowed period and send this into IETF: Session Timeout.

Best, Gorazd

any idea what enforcement policy i need to configure ?

Hi Jainmanu.

You should send session timeout attribute to set the time when session need to be reauthorized. Then you can check in Clearpass if session can proceed/be reauthorized or need to be terminated.

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

Hello 

it is not working. 

i created one Enforcement profile and under the profile i have added Radius-IETF - Session - Timeout - 100 Seconds . 

but it is not working and user is continue with work. 

Hi Jainmanu.

You should send IETF Session Timeout in seconds. 

You have several options. 

Simplest one is to send fixed number of seconds to reauthorize the session and then you can check in Clearpass, if it is expired.

You can calculate how many seconds is to the end of allowed period and send this into IETF: Session Timeout.

Best, Gorazd

any idea what enforcement policy i need to configure ?

Hi Jainmanu.

You should send session timeout attribute to set the time when session need to be reauthorized. Then you can check in Clearpass if session can proceed/be reauthorized or need to be terminated.

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

Hi Jain.

Session Timeout will force authentication request in Clearpass and you need to handle it in your service role mapping and enforcement policies to check, if it is Allow or Deny response.

Check Access tracker if you receive session authorization every 100 seconds.

Best, Gorazd

Hello 

it is not working. 

i created one Enforcement profile and under the profile i have added Radius-IETF - Session - Timeout - 100 Seconds . 

but it is not working and user is continue with work. 

Hi Jainmanu.

You should send IETF Session Timeout in seconds. 

You have several options. 

Simplest one is to send fixed number of seconds to reauthorize the session and then you can check in Clearpass, if it is expired.

You can calculate how many seconds is to the end of allowed period and send this into IETF: Session Timeout.

Best, Gorazd

any idea what enforcement policy i need to configure ?

Hi Jainmanu.

You should send session timeout attribute to set the time when session need to be reauthorized. Then you can check in Clearpass if session can proceed/be reauthorized or need to be terminated.

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hi Jain.

Session Timeout will force authentication request in Clearpass and you need to handle it in your service role mapping and enforcement policies to check, if it is Allow or Deny response.

Check Access tracker if you receive session authorization every 100 seconds.

Best, Gorazd

Hello 

it is not working. 

i created one Enforcement profile and under the profile i have added Radius-IETF - Session - Timeout - 100 Seconds . 

but it is not working and user is continue with work. 

Hi Jainmanu.

You should send IETF Session Timeout in seconds. 

You have several options. 

Simplest one is to send fixed number of seconds to reauthorize the session and then you can check in Clearpass, if it is expired.

You can calculate how many seconds is to the end of allowed period and send this into IETF: Session Timeout.

Best, Gorazd

any idea what enforcement policy i need to configure ?

Hi Jainmanu.

You should send session timeout attribute to set the time when session need to be reauthorized. Then you can check in Clearpass if session can proceed/be reauthorized or need to be terminated.

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

please check my attach document

do not know where i am wrong because still the policy is not working. 

Hi Jain.

Session Timeout will force authentication request in Clearpass and you need to handle it in your service role mapping and enforcement policies to check, if it is Allow or Deny response.

Check Access tracker if you receive session authorization every 100 seconds.

Best, Gorazd

Hello 

it is not working. 

i created one Enforcement profile and under the profile i have added Radius-IETF - Session - Timeout - 100 Seconds . 

but it is not working and user is continue with work. 

Hi Jainmanu.

You should send IETF Session Timeout in seconds. 

You have several options. 

Simplest one is to send fixed number of seconds to reauthorize the session and then you can check in Clearpass, if it is expired.

You can calculate how many seconds is to the end of allowed period and send this into IETF: Session Timeout.

Best, Gorazd

any idea what enforcement policy i need to configure ?

Hi Jainmanu.

You should send session timeout attribute to set the time when session need to be reauthorized. Then you can check in Clearpass if session can proceed/be reauthorized or need to be terminated.

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

Hi Manu.

I did not see any Deny Access profile in Your policy. You need to have Deny Access as a Default profile and explicit Allow Access in your  allow enforcement line.

Best, Gorazd

please check my attach document

do not know where i am wrong because still the policy is not working. 

Hi Jain.

Session Timeout will force authentication request in Clearpass and you need to handle it in your service role mapping and enforcement policies to check, if it is Allow or Deny response.

Check Access tracker if you receive session authorization every 100 seconds.

Best, Gorazd

Hello 

it is not working. 

i created one Enforcement profile and under the profile i have added Radius-IETF - Session - Timeout - 100 Seconds . 

but it is not working and user is continue with work. 

Hi Jainmanu.

You should send IETF Session Timeout in seconds. 

You have several options. 

Simplest one is to send fixed number of seconds to reauthorize the session and then you can check in Clearpass, if it is expired.

You can calculate how many seconds is to the end of allowed period and send this into IETF: Session Timeout.

Best, Gorazd

any idea what enforcement policy i need to configure ?

Hi Jainmanu.

You should send session timeout attribute to set the time when session need to be reauthorized. Then you can check in Clearpass if session can proceed/be reauthorized or need to be terminated.

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

Hi Manu.

No. I didn't see this. It wasn't downloaded. Did you check in access tracker that it really send deny?

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

see i am attaching again. 

Hi Manu.

No. I didn't see this. It wasn't downloaded. Did you check in access tracker that it really send deny?

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

I'm sorry for not replying yet. I'm a little bit busy currently.

Best, Gorazd

see i am attaching again. 

Hi Manu.

No. I didn't see this. It wasn't downloaded. Did you check in access tracker that it really send deny?

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

Hi Manu.

Any progress? As Herman explain already, what is in Access Tracker? Do you see regular reauthentications?

Best, Gorazd

I'm sorry for not replying yet. I'm a little bit busy currently.

Best, Gorazd

see i am attaching again. 

Hi Manu.

No. I didn't see this. It wasn't downloaded. Did you check in access tracker that it really send deny?

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this. 

see i am attaching again. 

Hi Manu.

No. I didn't see this. It wasn't downloaded. Did you check in access tracker that it really send deny?

Best, Gorazd

please find attachment of my enforcement policy but here after ending the time still connection is working , by rights it should be denied automatically correct ?

Hello Team, 

now it is working successfully but there is one small issue actually after ending the time the port is not bouncing automatically so user are doing continue working with the cable. 

but I want after ending the time it should be denied for them. 

not understanding how to achieve this.