You are troubleshooting an authentication issue for HPE Aruba Networking switches that enforce 802.1X to a cluster of HPE Aruba Networking ClearPass Policy Manager (CPPMs). You know that CPPM is…

Question

Options

• AGo to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.
• BVerify that you are logged in to the CPPM UI with read-write, not read-only, access.
• CMake sure that CPPM cluster settings are configured to show Access-Rejects.
• DClick Edit in Access Viewer and make sure that the correct servers are selected.

• A
  45% (29)
• B
  32% (21)
• C
  15% (10)
• D
  8% (5)

Explanation

The scenario involves troubleshooting an 802.1X authentication issue on HPE Aruba Networking switches (likely AOS-CX switches) that use a cluster of HPE Aruba Networking ClearPass Policy Manager (CPPM) servers as the RADIUS server. The switches show Access-Rejects in their statistics, indicating that CPPM is receiving and processing the authentication requests but rejecting them. However, the records for these Access-Rejects are not visible in CPPM Access Tracker. Access Tracker: Access Tracker (Monitoring > Live Monitoring > Access Tracker) in CPPM logs all authentication attempts, including successful (Access-Accept) and failed (Access- Reject) requests. If an Access-Reject is not visible in Access Tracker, it suggests that the request was processed at a lower level and not logged in Access Tracker, or there is a visibility issue (e.g., filtering, clustering). Option A, "Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored," is correct. The Event Viewer (Monitoring > Event Viewer) in CPPM logs system-level events, including RADIUS-related events that might not appear in Access Tracker. For example, if the Access-Reject is due to a configuration issue (e.g., the switch's IP address is not recognized as a Network Access Device, NAD, or the shared secret is incorrect), the request may be rejected before it is logged in Access Tracker, and the Event Viewer will capture this event (e.g., "RADIUS authentication attempt from unknown NAD"). Since the switches confirm that CPPM is sending Access-Rejects, the Event Viewer is a good place to look for more details.

No community discussion yet for this question.