Aruba

• Familiarity with network standards and terminology, VLANs and IP protocols including routing and switching.
• Basic WLAN terminology and concepts.
• Knowledge of wired and wireless networking design and operations.
• Knowledge of RADIUS server configuration, 802.1X authentication, AAA, LDAP and Active Directory experience.

This Instructor Led Training (ILT) course prepares participants with foundational skills in Network Access Control using the ClearPass product portfolio. This 5-day classroom session includes both modules and labs to teach participants about the major features of the ClearPass portfolio. Participants will learn how to setup ClearPass as a AAA server, and configure the Policy Manager, Guest, OnGuard and OnBoard feature sets. In addition, this course covers integration with external Active Directory servers, Monitoring and Reporting, as well as deployment best practices.

After you successfully complete this course, expect to be able to:

• Ability to setup ClearPass as a AAA server
• Demostrate Configuration Guest, Ongurad, Onboard and Profiling features
• Integrate with External AD Server
• Understand Monitoring and Reporting
• Demostrate Scaling and deployment of best practices

Intro to ClearPass

• BYOD
• High Level Overview
• Posture and Profiling
• Guest and Onboard

ClearPass for AAA

• Policy Service Rules
• Authentication Authorization and Roles
• Enforcement Policy and Profiles

Authentication and Security Concepts

• Authentication Types
• Servers
• Radius COA
• Active Directory
• Certificates

Intro to NAD

• NAD Devices
• Adding NAD to ClearPass
• Network Device Groups
• Network Device Attributes
• Aruba Controller as NAD
• Aruba Switch
• Aruba Instant

Monitoring and Troubleshooting

• Monitoring
• Troubleshooting
• Logging
• Policy Simulation

ClearPass Insight

• Insight Dashboard
• Insight Reports
• Insight Alerts
• Insight Search
• Insight Administration
• Insight Replication

Active Directory

• Adding AD as Auth Source
• Joining AD domain
• Using AD services

External Authentication

• Multiple AD domains
• LDAP
• Static Host Lists
• SQL Database
• External Radius Server

Guest

• Guest Account creation
• Web Login pages
• Guest Service configuration
• Self-registration pages
• Configuring NADS for Guest
• Guest Manager Deep Dive
• Web Login Deep Dive
• Sponsor Approval
• MAC Caching

Onboard

• Intro to Onboard
• Basic Onboard Setup
• Onboard Deepdive
• Single SSID Onboarding
• Dual SSID Onboarding

Profiling

• Intro to Profiling
• Endpoint Analysis Deep Dive

Posture

• Intro to Posture
• Posture Deployment Options
• OnGuard Agent Health Collection
• OnGuard workflow
• 802.1x with Posture using Persistent/dissolvable agent
• OnGuard web LoginMonitoring and Updates

Operation and Admin Users

• Operations
• Admin Users

Clustering and Redundancy

• Clustering
• Redundancy
• LAB

Licensing

• ClearPass Licensing
• Base License
• Applications

Single Sign-On

• Deployment Options
• ClearPass Admin Login SSO
• Access Network SSO
• ASO-Auto-Sign On
• Configuration and Demo

ClearPass Exchange

• Intro
• Examples
• General HTTP Palo Alto Firewall
• Configuration

Case Study

• Objectives
• Discussion
• Advanced Labs Overview