Dell Powerconnect W-ClearPass Virtual Appliances Quick Start Manual

Dell Networking
W-ClearPass
Policy Manager 6.0
Quick Start Guide
Copyright Information
Copyright
© 2013 Aruba Networks, Inc. Aruba Networks trademarks include the Aruba Networks logo, Aruba Networks®, Aruba Wireless Networks®, the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc.
All rights reserved. Specifications in this manual are subject to change without notice.
Originated in the USA. All other trademarks are the property of their respective owners.
Open Source Code
Certain Aruba products include Open Source software code developed by third parties, including software code subject to the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other Open Source Licenses. Includes software from Litech Systems Design. The IF-MAP client library copyright 2011 Infoblox, Inc. All rights reserved. This product includes software developed by Lars Fenneberg, et al. The Open
Source code used can be found at this site:
http://www.arubanetworks.com/open_source
Legal Notice
The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to terminate other vendors’ VPN client devices constitutes complete acceptance of liability by that individual or corporation for this action and indemnifies, in full, Aruba Networks, Inc. from any and all legal actions that might be taken against it with respect to infringement of copyright on behalf of those vendors.
Mar 2013 | 0511278-01 Dell Networking W-ClearPass PolicyManager 6.0 | QuickStart Guide
Contents
Configuring Policy Manager 5
Installing Policy Manager
Server Port Overview
Server Port Configuration
A Subset of Useful CLI Commands
Accessing Policy Manager 9
Accessing Help
Checking Basic Services 11
802.1x Wireless Use Case 13
Configuring the Service
Web Based Authentication Use Case 19
Configuring the Service
MAC Authentication Use Case 25
Configuring the Service
10
13
19
26
5
5
5
7
Dell Networking W-ClearPass PolicyManager 6.0 | QuickStart Guide 3
4 Dell Networking W-ClearPass PolicyManager 6.0 | QuickStar t Guide
Chapter 1

Configuring Policy Manager

This Quick Start Guide for the Dell Networking W-ClearPass Policy Manager System (Policy Manager) describes the steps for installing the appliance using the that the required services are running.

Installing Policy Manager

The Policy Manager server requires initial port configuration.

Server Port Overview

Policy Manager Backplane
P—Power Button; A—Serial port; B—Management port; C—Data port
Command Line Interface
(CLI) and using the
User Interface
(UI) to ensure
as described in the following table:
Key Port Description
Configures the Policy Manager
A Serial
B - eth1
C - eth2 Data (gigabit Ethernet)
Management (gigabit Ethernet)
appliance initially, via hardwired terminal.
Provides access for cluster administration and appliance maintenance via web access, CLI, or internal cluster communications. Configuration required.
Provides point of contact for RADIUS, TACACS+, Web Authentication and other data-plane requests. Configuration optional. If not configured, requests redirected to the management port.

Server Port Configuration

Before starting the installation, gather the following required information:
Dell Networking W-ClearPass PolicyManager 6.0 | QuickStart Guide 5
Required Item Item Information
Hostname (Policy Manager server)
Management Port IP Address
Management Port Subnet Mask
Management Port Gateway
Data Port IP Address (optional)
Data Port Gateway (optional)
Data Port Subnet Mask (optional)
Primary DNS
Secondary DNS
NTP Server (optional)
Data Port IP Address must not be in the same subnet as the Management Port IP Address
To set up the Policy Manager appliance:
1. Connect and power on.
Using the null modem cable provided, connect a serial port on the appliance to a terminal, then connect power and switch on. The appliance immediately becomes available for configuration.
Use the following parameters for the serial port connection:
l Bit Rate: 9600
l Data Bits: 8
l Parity: None
l Stop Bits: 1
l Flow Control: None
2. Login.
Later, you will create a unique appliance/cluster administration password. For now, use the preconfigured credentials:
login: appadmin
password: eTIPS123
This starts the Policy Manager Configuration Wizard.
3. Configure the appliance.
Replace the bolded placeholder entries in the following illustration with your local information:
Enter hostname: hyperion.us.arubanetworks.com
Enter Management Port IP Address: 192.168.5.10
Enter Management Port Subnet Mask: 255.255.255.0
Enter Management Port Gateway: 192.168.5.1
Enter Data Port IP Address: 192.168.7.55
Enter Data Port Subnet Mask: 255.255.255.0
Enter Data Port Gateway: 192.168.7.1
Enter Primary DNS: 198.168.5.3
6 Dell Networking W-ClearPass PolicyManager 6.0 | QuickStar t Guide
Enter Secondary DNS: 192.168.5.1
4. Change your password.
Use any string of at least six characters:
New Password:************
Confirm Password:************
Going forward, you will use this password for cluster administration and management of the appliance.
5. Change system date/time.
Do you want to configure system date time information [y|n]: y Please select the date time configuration options.
1) Set date time manually
2) Set date time by configuring NTP servers Enter the option or press any key to quit: 2
Enter Primary NTP Server: pool.ntp.org
Enter Secondary NTP Server: time.nist.gov
Do you want to configure the timezone? [y|n]: y
Once the timezone information is entered, you are asked to confirm the selection.
6. Commit or restart the configuration.
Follow the prompts:
y[Y] to continue n[N] to start over again q[Q] to quit Enter the choice: Y Successfully configured Policy Manager appliance ************************************************************** * Initial configuration is complete. * Use the new login password to login to the CLI. * Exiting the CLI session in 2 minutes. Press any key to exit now.

A Subset of Useful CLI Commands

The CLI provides a way to manage and configure Policy Manager information. Refer to
Interface
in the User Guide for more detailed information on the CLI.
The CLI can be accessed from the console using a serial port interface or remotely using SSH:
***************************************************************************************** * * * Dell W-ClearPass Policy Manager 6.0.2.49062 * * * ***************************************************************************************** Logged in as group Local Administrator [appadmin@hyperion.us.arubanetworks.com]#
The following subset of CLI commands may be useful at this point:
l To view the Policy Manager data and management port IP address, and DNS configuration:
[appadmin]# show ip
l To reconfigure DNS or add a new DNS:
[appadmin]# configure dns <primary> [secondary] [tertiary]
l To reconfigure or add management and data ports:
[appadmin]# configure ip <mgmt | data > <ipadd> netmask <netmask address> gateway <gateway address>
where:
Appendix A: Command Line
Dell Networking W-ClearPass PolicyManager 6.0 | QuickStart Guide 7
Flag/Parameter Description
ip <mgmt|data> <ip address>
l Network interface type: mgmt or data l Server ip address.
netmask <netmask address> Netmask address.
gateway <gateway address> Gateway address.
l To configure the date (time and time zone optional):
[appadmin]# configure date –d <date> [-t <time>] [-z <timezone>]
l To configure the hostname to the node:
configure hostname <hostname>
l If you are using Active Directory to authenticate users, be sure to join the Policy Manager appliance to that
domain as well.
ad netjoin <domain-controller.domain-name> [domain NETBIOS name]
where:
Flag/Parameter Description
<domain-controller. domain­name>
[domain NETBIOS name]
Required. Host to be joined to the domain.
Optional.
8 Dell Networking W-ClearPass PolicyManager 6.0 | QuickStar t Guide
Chapter 2

Accessing Policy Manager

Use
Firefox 3.0
1. Open the administrative interface.
Navigate to https://<hostname>/tips (where <hostname> is the hostname you configured during the initial configuration).
2. Enter License Key.
3. Click on the Activate Now link.
(or higher) or
Internet Explorer 7.0.5
(or higher) to perform the following steps:
4. Activate the product.
If the appliance is connected to the Internet, click on the Activate Now button. If not, click on the Download button to download the Activation Request Token. Contact Dell Support and provide your technician with the downloaded token in an email attachment. Once you receive the Activation Key from Dell Support, save it to a known location on your computer. Come back to this screen and click on the Browse button to select the Activation Key. Upload the key by clicking on the Upload button.
The product is now activated.
Dell Networking W-ClearPass PolicyManager 6.0 | QuickStart Guide 9
Loading...
+ 19 hidden pages