What is the best get software updates. In should it go through a proxy or directly NAT out to the internet? I assume, through a proxy to secure it, and no external connections?
Both are an option. I see in many cases direct connections out to the internet, and uses clearpass.arubanetworks.com on port 443 (HTTPS). But I have seen customers updating over a proxy, or 'offline' by downloading the updates from ASP and upload them to the ClearPass appliance. Direct NAT out to clearpass.arubanetworks.com should not increase the risk versus using a proxy imho.
Any ideas what the issue may be when logging onto the GUI, adding the PAK and not receiving the CPPM screen - just CPPM at the time and the yellow banner on the top left - no Dashboard, but Aruba above it?
Can you try to clear your browser cache or try in a 'incognito' or different browser? If that does not help, are your assigned VM resources correct? Weird issues like these many times are either browser cached content or lack of resources for the ClearPass VM. If that doesn't help, please post the question on the Airheads community where you can add a screenshot; or work with your Aruba partner or Aruba TAC.
Hi there,soooo,wthout any kind of licence is impossible to follow up with the workshop?Do exists something like free evaluation license os something similar?TIA
Please reach out to your Aruba Partner or local Aruba SE to get a license. I think even if you have an account in Aruba Support Portal, that you can create an evaluation license yourself, so you could try that first before reaching out.
Hi, is it possible to do the configuration via a config file that can be put in git and be deployed via ansible/salt? We'd like to deploy all new systems as IaC (Infrastructure as Code).
Unfortunately that is not possible. You can do things through the APIs, but full config through that is not possible. You may reach out to your local Aruba sales team, as there are some possible solutions through the Aruba HTS team (high-touch-services) who can build, deliver and support solutions beyond what is officially included in the product.
Unfortunately, I don't have such a switch. In the previous series, there is a video on how to setup TACACS+ for ArubaOS Switch: ruclips.net/video/H5vBbUun7C8/видео.html It should get you started with Cisco switches as well as the configuration on the switch is pretty minimal and most of the magic happens in the ClearPass. I will write down a note to create a similar video for AOS-CX, which from CLI seems to be even closer. If you struggle with the switch commands, you could use the CX/ArubaOS-Switch/Cisco CLI side-to-side guide: asp.arubanetworks.com/downloads/documents/RmlsZTozNWFjZjlhMC03MWU1LTExZTktOWJiMi00MzAzNTc0OGFmNDA%3D
Thank you Herman for making these video so easy to follow :-)
Another great video thanks Herman
Amazing as usual , thanks Herman
Thx sir,
Really I got big help from your video👍
What is the best get software updates. In should it go through a proxy or directly NAT out to the internet? I assume, through a proxy to secure it, and no external connections?
Both are an option. I see in many cases direct connections out to the internet, and uses clearpass.arubanetworks.com on port 443 (HTTPS). But I have seen customers updating over a proxy, or 'offline' by downloading the updates from ASP and upload them to the ClearPass appliance. Direct NAT out to clearpass.arubanetworks.com should not increase the risk versus using a proxy imho.
Any ideas what the issue may be when logging onto the GUI, adding the PAK and not receiving the CPPM screen - just CPPM at the time and the yellow banner on the top left - no Dashboard, but Aruba above it?
Can you try to clear your browser cache or try in a 'incognito' or different browser? If that does not help, are your assigned VM resources correct? Weird issues like these many times are either browser cached content or lack of resources for the ClearPass VM. If that doesn't help, please post the question on the Airheads community where you can add a screenshot; or work with your Aruba partner or Aruba TAC.
Thanks for coming back to me, @@hermanrobers . I rebuilt the VM last night and all is now well, so possibly just a build error 👍.
Hi there,soooo,wthout any kind of licence is impossible to follow up with the workshop?Do exists something like free evaluation license os something similar?TIA
Please reach out to your Aruba Partner or local Aruba SE to get a license. I think even if you have an account in Aruba Support Portal, that you can create an evaluation license yourself, so you could try that first before reaching out.
Hi is there one hardware that can be WLC and CPPM? Thank you
No, ClearPass is dedicated hardware, or VM running on ESXi/KVM/Hyper-V.
Hi, is it possible to do the configuration via a config file that can be put in git and be deployed via ansible/salt? We'd like to deploy all new systems as IaC (Infrastructure as Code).
Unfortunately that is not possible. You can do things through the APIs, but full config through that is not possible. You may reach out to your local Aruba sales team, as there are some possible solutions through the Aruba HTS team (high-touch-services) who can build, deliver and support solutions beyond what is officially included in the product.
The can u do a video expalining Taccas + with cisco switch
Unfortunately, I don't have such a switch. In the previous series, there is a video on how to setup TACACS+ for ArubaOS Switch: ruclips.net/video/H5vBbUun7C8/видео.html It should get you started with Cisco switches as well as the configuration on the switch is pretty minimal and most of the magic happens in the ClearPass. I will write down a note to create a similar video for AOS-CX, which from CLI seems to be even closer. If you struggle with the switch commands, you could use the CX/ArubaOS-Switch/Cisco CLI side-to-side guide: asp.arubanetworks.com/downloads/documents/RmlsZTozNWFjZjlhMC03MWU1LTExZTktOWJiMi00MzAzNTc0OGFmNDA%3D
I have a Cisco switch so I will see what I can do to make a video on this after my vacation.
Hi, How to enable TLS 1.2 and 1.3
Those are enabled by default. You can disable TLS1.0 and TLS1.1 from the Cluster Wide Settings.