Aruba ClearPass (ACCA and ACCP) Training With Labs

Introduce Aruba ClearPass and network access control, exploring ClearPass modules, why we need it, and how to provision ClearPass in our network, plus hardware and virtual appliances.

Explore network access control (NAC) and Aruba ClearPass, and learn how RADIUS, policy servers, pre- and post-admission controls, and device profiling secure wired and wireless networks.

Explore how Aruba ClearPass delivers policy-driven access control across hardware, virtual, and cloud deployments, centers on the ClearPass policy manager, and enforces identify, enforce, and protect through radius-based authentication.

Explore the six Aruba ClearPass modules—policy manager, on guard, on board, profiler, guest, and insight reporting—and understand their roles in authentication, posture checks, BYOD onboarding, and access control.

Discover why Aruba ClearPass is essential for security and compliance amid bring your own device and guest access, offering policy enforcement, visibility, and post-authentication actions.

Aruba ClearPass is a unified policy engine for wired, wireless, and IoT devices with managed policies and certificates, deployed at headquarters or data centers to serve branches with high availability.

Explore Aruba ClearPass hardware and virtual appliances, covering hardware models from C1000 to C3010, resource specs, out-of-band management and concurrent sessions, plus cloud deployment in AWS and Azure.

Aruba ClearPass licensing types and how to deploy ClearPass in a VMware Workstation. Generate ClearPass licenses, enable automatic updates and radius blog updates, and activate ClearPass with an activation key.

Learn Aruba ClearPass license types: permanent, subscription, and evaluation. Understand policy manager platform license, base licenses (entry and access), add-ons (on guard and on board), and activation keys enable features.

Deploy ClearPass in VMware Workstation using the c lab v appliance and ESXi image, meeting two vCPUs, six GB of RAM, and 160 GB disk requirements.

Generate ClearPass licenses and apply them to the ClearPass appliance. Activate policy manager platform, entry, access, onboard, and on guard licenses via the license management portal.

Prepare ClearPass for automatic updates, enable radius log updates, and enable ClearPass insights as the insight primary server to centralize data.

Activate the ClearPass appliance by choosing online or offline activation, upload activation keys via licensing, and activate each product from server administration to get the system ready.

Learn how to integrate Aruba ClearPass with Active Directory, configure Active Directory as an authentication source, and verify the authentication setup.

demonstrates integrating ClearPass with Active Directory to authenticate users via kerberos or ldap using radius, with two labs: first sync with an ftp server, then join the Active Directory domain.

Configure Active Directory as an authentication source in ClearPass to verify network user credentials and manage primary and backup AD settings.

Verify the Active Directory authentication source using ClearPass policy simulator by creating Humpty and Dumpty in AD, testing their logins, and confirming a non-existent user fails authentication.

Set up and integrate the virtual mobility controller and Aruba switch with Aruba ClearPass, then configure a device group and add the controller and switch as its members.

Configure a virtual mobility controller in a lab: set up the VMC image and network, register it in ClearPass as a network device with radius and device type attributes.

Configure an Aruba virtual switch in ClearPass, establishing management VLAN and IP connectivity. Register the switch in ClearPass as a network device with radius credentials and vendor HP.

Configure a new device group in the ClearPass GUI, add Aruba virtual mobility controller and Aruba virtual switch to the group, then save and review the lab setup.

Explore the Aruba ClearPass profiler, collectors, and device profiling with fingerprinting. Configure endpoint profiling on the mobility controller, implement if-map, and set ClearPass as a radius server on the switch.

Discover how ClearPass profiler classifies endpoints—from PCs to IP phones to apps—using collectors and DHCP fingerprinting to assign device category, device, family, and device name for policy-based access.

Configure a virtual mobility controller to profile endpoints by relaying DHCP requests to ClearPass, enabling fingerprinting and policy enforcement for devices on VLAN 35, with MAP integration.

Configure a switch for endpoint profiling by creating vlan 45, assigning it to core-facing interfaces, configuring an svi with ClearPass and dhcp helpers, and enabling ClearPass as a radius server.

Add new fingerprints in Aruba ClearPass by editing the fingerprint dictionary, create an Aruba server fingerprint for VM AWS, and apply or revert it on an endpoint or ClearPass server.

configure ClearPass services, rules, and authentication sources; implement enforcement profiles, roles, and role mapping; and configure a virtual Mobility Controller to assign client roles, finishing with the ClearPass services workflow.

Learn how ClearPass defines services as groups that apply service rules, authentication methods, authorization sources, posture enforcement, and enforcement profiles, and create or manage them with manual, wizard, or templates.

Configure enforcement profiles and policies in clearpass to push Aruba user role via radius vsa attribute for nf underscore employee, contractor, and helpdesk when policy conditions are met.

Configure enforcement policies as rules with conditions that apply enforcement profiles through the policy manager, using Active Directory group memberships (nf_workgroup_employee, nf_workgroup_contractor, nf_workgroup_helpdesk) to assign nf_pro profiles.

Learn the differences between role mapping and enforcement profiles in Aruba ClearPass: role mapping creates a local tips role from group membership, while enforcement profiles apply policies by tagging.

Enable and configure the profiler tab in ClearPass services to classify devices and endpoints, choose endpoint categories, and prepare for role configuration with the virtual mobility controller.

Configure a virtual mobility controller by setting VLANs, role-based access control, and radius-based authentication with ClearPass, mapping AD groups to VLANs, ACLs, SSIDs, and VAPs.

Explore Aruba ClearPass setup by customizing a web page and creating a guest account. Set up a guest access service with a web login and hmac caching, plus self-registration.

Customize a ClearPass guest web page by uploading a picture, duplicating the service unavailable page, and updating the Galera skin via skin plugins to reflect a new logo and header.

Create a ClearPass guest user nf_guest_client, assign the guest role with one-week expiration, configure the email nf_guest_client at nf example.com, and review account management and self-registration concepts.

Configure a ClearPass guest service with a web login page and captive portal, linking a nf_guest_ssid and radius-based policy to assign the guest role on the virtual mobility controller.

Configure Aruba ClearPass guest authentication with MAC caching, creating two services: guest authentication with MAC caching (captive portal) and MAC authentication, then integrate with the virtual mobility controller.

Configure a self-registration portal for guests on Aruba ClearPass, enabling guests to create their own accounts via a registration form, sponsor approval, and automatic provisioning for network access.

Explore Aruba ClearPass on guard, posted policies, and on guard agents with components. Learn to customize and install the on guard agent on a client PC and create a service.

ClearPass on guard performs endpoint health checks and uses posture policies to assign healthy, quarantine, or infected tokens, enforcing access across wired, wireless, and remote networks.

Explore ClearPass on guard agents: agentless, persistent, and dissolvable, and their components, including front end UI, back end service, plugin, configuration, remediation, and VPN service for posture checks.

Customize the on guard agent settings for the persistent and dissolvable agents and install the pc agent, detailing installer modes, health checks, interfaces, and the download-and-install process.

Configure ClearPass on guard with web based health check and 802.1x posture services, either manually or via templates. Enforce tokens and roles through policies, bounce sessions, and post-authentication re-auth.

Explore the Aruba ClearPass cluster, including publisher and subscriber roles, and learn to build a cluster via GUI and CLI, monitor it, and configure high availability and load shedding.

Explains how clearpass cluster uses a publisher–subscriber model with one publisher and multiple subscribers, where changes occur on the publisher and replicate to subscribers, including the three databases and ports.

Build a ClearPass cluster in a lab by linking a publisher and a subscriber, with or without https certificates, and verify policy synchronization via the dashboard and CLI.

Explore cluster monitoring of ClearPass with publisher and subscriber, view logs in access tracker, and customize server domains and nas name for comprehensive cross-server visibility.

Configure ClearPass high availability and load sharing by setting virtual groups 240 and 250 with primary and secondary publisher and subscriber roles and virtual IPs 10.1.1.240 and 10.1.1.250.