We have been running ClearPass Policy Manager as our RADIUS for almost 3 years. We do not use the NAC (OnGuard) piece. We use a non-Aruba product to configure our clients for 802.1X. We are using the ClearPass API along with our custom web portal to register mac authenticated non-802.1X clients (game consoles, etc.) on our network. We send syslog data mapping username to ip address to our Procera PacketLogic bandwidth management system to control bandwidth usage. Students are allowed 40G per calendar month until their speed is restricted. Students can purchase additional bandwidth.
We started with 2 25K VMs load-balanced by 2 25K VMs used as RADIUS proxy servers. This is not a recommended configuration. We had 2 proxy servers for redundancy. We started at over 1 million authentications per day. We currently have 4 25K appliances load-balanced by a redundant F5 BIG-IP cluster. We plan on implementing AirGroup & Guest soon. We are now about 1.5 million authentications per day with a mix of Cisco wired & Aruba wireless. The product has matured from the old 5.1.0 days to the current 6.3.1 version. We have a good working relationship with Aruba ClearPass support. The Network Services group supports both ClearPass and Airwave. Let me know what other information I can provide. Bruce Osborne Network Engineer - Wireless Team IT Network Services (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Cameron, Damien L. [mailto:[email protected]] Sent: Thursday, April 10, 2014 12:13 PM Subject: Clearpass Policy Manager I wanted to get some opinions on Clearpass Policy Manager. How have you deployed it? As a VM or using their HW appliance? My concern here is scalability and flexibility? What method did you use to find the right scale for CPPM? We recently deployed Airwave, and I am using the client data for my initial counts. Damien Cameron Network Engineer Norfolk State University Office of Information Technology Marie v. McDemmond Center for applied Research Room 401 555 Park Avenue Norfolk, VA 23504 O: (757) 823-9123 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
