HPE Aruba Networking ClearPass Advanced Configuration

This advanced level course is taught as a workshop. Participants will be led through a real-world design and implementation scenario encompassing all aspects of the HPE Aruba Networking ClearPass security product. This 5-day course will cover the design, implementation, and troubleshooting of ClearPass solutions. The course is presented as a workshop, meaning that it is focused on student participation and hands-on labs to reinforce concepts through design exercises and lab debriefs, as well as planning and implementation of the design. This is not a course that relies on a step-by-step lab guide and you will be challenged to find creative solutions to the scenario. By the nature of this workshop, you will master troubleshooting techniques in ClearPass.

¡Reserva ya!

Incluye:

Acceso a los Labs 24×7 – Student Kit Digital

Candidatos ideales

Network Security Experts
Individuals who implement network access control solutions.
Network managers with HPE Aruba Network access device experience (wired and wireless).
Network administrators who already own a ClearPass solution and are looking to deploy advanced features.

Prerrequisitos

Contenido

Network requirements
- ClearPass goals
- Network topology
- List of available resources
- Scenario analysis
- Authentication requirements
- Multiple user account databases
- User account attributes
- High level design
PDI and digital certificates
- Certificate types
- PKI
- Certificate trust
- Certificate file formats
- ClearPass as CA
- Certificate use cases:
  - EAP
  - HTTPS
  - Service-based certificates
  - Onboarding
  - Clustering
  - RadSec
  - NAD captive portal
- Installing certificates
- Enrollment over secure transport
Cluster design
- ClearPass server placement
- Determine the layout of the cluster
- High availability schema
- Design high availability
- VIP failover
- VIP mapping
- Insight primary and secondary
Network integration
- Authentication sources
  - Local user repository
  - Endpoint repository
  - Admin user repository
  - Guest user repository
  - Guest device repository
  - Onboard device repository
  - Active Directory
  - SQL server
- Define external servers
  - Unified endpoint management
  - Email server
- Endpoint profiling
  - IF-MAP
  - Active scans (SNMP)
  - DHCP
  - HTTPS
- Network devices
  - RadSec
  - Dynamic authorization
  - Logging of RADIUS accounting
  - Device-groups
  - Location attributes
- Policy simulation
Corporate access design
- Define the requirements
- High-level design
- Services design
- Plan TIPs roles
- User authentication
- Machine authentication
- Tunneled EAP, EAP-TLS and protected EAP
- One versus multiple services
- Plan enforcement
- Device-groups based enforcement
- Service implementation
- OnGuard design and implementation
  - Quarantine users
  - Remediation
- Onboard design and implementation
  - User and device authorization
- Informational pages
- Authorization validation
- Troubleshooting enforcement
- Downloadable roles
Guest access design
- Guest network design
- Captive portal flow
- Design tasks
- Define web pages
- Guest services design
- Guest services
- Guest access controls
- Configure network access devices
- Guest account creation
- Guest self registration
- Guest sponsor approval
- Self registration AD drop-down list
- Requirements for guest enforcement
Multi-pre shared key
- Define the requirements
- High-level design
- Device authorization
- Service design and implementation
Wired access
- AAA configuration
- 802.1X and MAC auth
- Using client profiling for authorization
- Using conflict attribute for authorization
- User roles configuration in AOS-S
- User roles configuration in AOS-CX
- Web redirection
- Multi-service ports
- Downloadable user roles enforcement profiles
- Downloadable user roles configuration and validation
Administrative access
- TACACs+ based NAD administration
- TACACs+ command authorization
- Policy Manager administrators
- Guest and Onboard operators
- Register devices for MPSK
- Insight operators
- Insight reports and alerts

Después de realizar este curso usted podrá:

After you successfully complete this course, expect to be able to:

Design a ClearPass cluster
Design a High availability solution with Virtual IP address following the best practices
Describe Public Key Infrastructure and certificate format types
Plan the certificates used by ClearPass
Explain how Enrollment over Secure Transport can automate the certificate generation process
Leverage RADIUS services to handle corporate wireless connections
Deploy WEBAUTH services to handle health checks
Describe the proposed RADIUS services that handles guest wireless connections
Explain general guest considerations
Design guest RADIUS services
Describe the proposed Onboard services
Describe the MPSK feature
Leverage these features in your deployment
Plan a successful wired access deployment
Provide administrative access control to ClearPass modules and NADs
Generate custom reports and alerts

Otros cursos que podrían interesarte

Orchestrating Distributed Services with the CX 10000 Series, Rev. 24.41

Online

19/05/2025

09/06/2025

20/04/2026

Designing HPE Aruba Data Center Solutions, Rev.23.31

Presencial

21/04/2025

30/06/2025

17/11/2025

Managing Campus Networks with the Airwave Management Platform (MCNAA)

Online

11/06/2024

Configuring Instant Access Points (CAIAP)

Hibrido

07/04/2025

Implementing Data Center Networks (IDCN)

Hibrido

08/09/2025

15/12/2025

Aruba Advanced OS-CX Switching & Troubleshooting Solutions (AAXSTS)

Online

19/05/2025

10/11/2025

Pearson VUE Authorized Test Center- The global leader in computer-based testing.

FlexTech es centro examinador autorizado de Pearson Vue
Reserva tus examenes de cetificaciones con nosotros!

Horario del centro: De Martes a Jueves

Contacta con nosotros

¿Tiene alguna pregunta acerca de nuestros servicios?

HPE Aruba Networking ClearPass Advanced Configuration

¡Reserva ya!

Incluye:

Otros cursos que podrían interesarte

Orchestrating Distributed Services with the CX 10000 Series, Rev. 24.41

Designing HPE Aruba Data Center Solutions, Rev.23.31

Managing Campus Networks with the Airwave Management Platform (MCNAA)

Configuring Instant Access Points (CAIAP)

Implementing Data Center Networks (IDCN)

Aruba Advanced OS-CX Switching & Troubleshooting Solutions (AAXSTS)

Contacta con nosotros

+34 912193768

info@flextech.es

Ronda de Poniente 12 oficina G planta 2 - 28760 Tres Cantos Madrid