
Introduction to the content of the entire course
Discover how ClearPass NAC delivers complete network access control by integrating RADIUS, identity providers, and policy enforcement to authenticate devices, apply access policies, and provide monitoring and reports.
In this lab we will perform the following tasks
•Explore the ClearPass Interface
•View Public Signed HTTPS certificate on ClearPass
•Enable Insight
•Join ClearPass to Active Directory Domain
•Add Active Directory as authentication source
•Test your Active Directory Authentication Source
In this lecture we will discuss roles and enforcement concepts in ClearPass.
That includes Role mapping and what/how actions can be managed in ClearPass
Learn to use roles or tags with enforcement policy and enforcement profiles. Map roles via road mapping policy to device context and conditions for automatic enforcement actions.
Explain how enforcement profiles define actions and how enforcement policies apply them through rules, including first-match or all-matches logic and device-specific attributes like Aruba user role or smartphone role.
This lab shows you the following
Add roles, and add users in local user DB
Create ClearPass Roles
Build Role Mapping Rules
Configure Enforcement Profiles
Configure Enforcement Policies
Learn how 802.1x authentication works in clearpass by creating services from scratch, templates, or wizard, covering supplicants, radius, EAP methods, certificates, and enforcement policy.
Configure and test a wireless service with ClearPass and Aruba Central, including tunnel mode, dynamic authorization, radius authentication, CoA, local and Active Directory identities, and device profiling.
Profile devices with ClearPass endpoint profiling to fingerprint endpoints, collect data, and enforce policy. Use dictionaries and collectors like DHCP and HTTP user agent to prevent spoofing and improve visibility.
In this lab we will cover the following
View Current Endpoint
Examine Endpoint Profile Data
Create New Update Fingerprint Rule
Explore how ClearPass enforces a captive portal for guests, detailing the guest service, web login, self-registration, and pre-authentication checks, plus certificate trust and NAT device configurations.
learn how to configure ClearPass guest services using the wizard, customize guest portals with skins, enable Mac caching, and implement captive portal with Aruba Central for guest access.
Explore wired access security with ClearPass, implementing 802.1x authentication, port profiling, and radius-based actions such as dynamic VLANs and ACLs, plus SNMP integration with switches.
Learn how ClearPass pushes local or downloadable user roles to Aruba switches to enable centralized tunneling, VLAN assignments, and per-port tunnels to mobility controllers with redundancy.
Configure wired authentication using 802.1x on the switch and connect to ClearPass policy manager. Define VLANs 11, 10, and 12 based on engineer attributes and local users.
Discover how ClearPass OnGuard uses posture policies and endpoint health checks to generate tokens from agents (persistent, native, dissolvable) and enforce access through 802.1x, with quarantine or full access outcomes.
Learn to configure ClearPass OnGuard posture policies, token generation, and enforcement profiles, then deploy a health check service and agent to categorize devices as healthy or unhealthy and enforce redirects.
Learn how to onboard BYOD using ClearPass Onboard, configure certificate authority, PKI, and EAP-TLS for certificate-based access, and manage network settings, configuration profiles, provisioning, and OCSP checks.
Configure clearpass onboard lab 8 to enable BYOD with lab CA root, configure network, provisioning, and onboard service; test by authenticating via EAP-TLS and redirect to the login page.
Explore admin access control, licensing models, and certificate management in ClearPass, including on guard and on board licenses, PKI with root/intermediate/issuing CAs, and certificate signing workflows.
Centralize admin authentication with TACACS+ and Clearpass for NAT devices, access points, and controllers via Active Directory, while using enforcement policies and translation rules for privileged access.
In lab 9, explore Clearpass TACACS+ admin access by connecting Clearpass to Active Directory, creating admin role mappings and privileges, and enforcing access through Policy Manager and monitoring tools.
Enable ClearPass insight in the admin section, explore the inside dashboard, and create customized reports and watch list alerts for authentication events.
Master ClearPass troubleshooting by using Access Tracker, System Monitor, Audit Viewer, and Event Viewer to analyze authentication failures, log details, and policy evaluations with configurable filters.
Learn to form a ClearPass cluster with a publisher and subscriber, configure a virtual IP, and implement redundancy, load sharing, and failover through service replication.
This course is about HPE Aruba ClearPass NAC solution and prepares candidates to pass HPE6-A88 ClearPass Exam
It is meant for those who are interested in learning about NAC and specifically how Aruba ClearPass is configured to perform its tasks
Exam preparation should not only be based on this training but it does give a good helping hand to pass the exam
This course is a combination of lectures to explain the concept and labs to demo the details of the configuration
Those who needs to know more about the exam visit HPE Networking ClearPass Exam | Certification and Learning to help them further understand more details about the exam
in summary this course covers
AAA Authentication, Authorization and accounting
Roles and Enforcements
Integrating ClearPass with mail gateway
ClearPass Wireless Service Components and how to configure them
using templates and wizards
Endpoint profiling
ClearPass Guest solutions including sponsor and guest self-registration
Wired Authentication
ClearPass OnGuard for compliance
ClearPass OnGuard agent types
ClearPass Onboard which is BYOD
The concept of the digital certificate and its components
How to create a Certificate Authority and use Onboard to push certificate to the client machine
ClearPass Admin Access and TACACS+
ClearPass Insight reporting
Using ClearPass to troubleshoot client authentication issues
ClearPass redundancy and failover