topic Re: ISE with Aruba Clearpass TACACS in Network Access Control

ISE with Aruba Clearpass TACACS

James Davies — Wed, 07 Jul 2021 15:36:11 GMT

To manage one of our clients, we use our ISE (2.7) to manage the Clearpass device, but users are not logging on, the Policy is being hit, but doesnt show in the logs and the user is refused login,

I created a TACACS Profile with the AV Pair " AdminPrivilege=Super Administrator " but I suspect this is wrong, I cannot find information anywhere on what TACACS profile to use for this!

Any help appreciated,.

Re: ISE with Aruba Clearpass TACACS

Arne Bier — Thu, 22 Jul 2021 05:56:42 GMT

Have you seen this article in Aruba Airheads? It appears that the response from a TACACS+ server to Clearpass has to be quite specific. I have not done it myself though

Re: ISE with Aruba Clearpass TACACS

James Davies — Thu, 26 Aug 2021 08:09:52 GMT

The solution was to create a TACACS PROFILE like this: Took me all day, but it worked for me

Re: ISE with Aruba Clearpass TACACS

jvooght01 — Fri, 16 Dec 2022 22:15:07 GMT

Sorry to bring up an old thread. What does your Clearpass TACACS service for Management Logins look like? Authentication is hitting ISE and passing, but Clearpass is failing stating the user cannot be found.

Re: ISE with Aruba Clearpass TACACS

jvooght01 — Mon, 19 Dec 2022 12:52:29 GMT

Disregard my last. I figured out my issue. I had to set the device to "Single Connect Mode". Without that the authorization was failing with a TCP RST.