教程说明分析clearpass-liu ning

1、Licensing 101: ClearPassAruba Quotient Sales Enablement DeckAs of 4/19/2014 | email AgendaTypes of LicensesClearPass Policy ManagerClearPass GuestClearPass OnBoardClearPass OnGuardClearPass EnterpriseClearPass QuickConnectSummaryTypes of Licenses1. Perpetual Licenses2. Subscription Licenses Based on

2、 EndpointsClearPass Policy ManagerCPPM capacity and licensing is based on the number of endpoints (or # of IP addresses)ClearPass Policy ManagerCPPM includes AAA, Profile, TACACS+, AirGroup MAC auth., & ClearPass Exchange featuresClearPass Policy ManagerThe number of each per Feature license cannot

3、exceed CPPM capacityClearPass Policy ManagerClearPass supports cluster-wide capacity & licensesClearPass Policy Manager CPPM capacity can be purchased in endpoint increments of 500, 5000 and 25000. If capacity limits are abused, management is locked outEx:ClearPass GuestGuest licenses are consumed i

4、n the fashion belowCPGM supports sponsorship, billing and advertisingEx: Same 10 devices in 7 days = 10 CPG + 10 CPPMDiff. 10 devices in 7 days = 10 CPG + 70 CPPMClearPass OnBoardOnBoard licenses are based on the number of certificates provisioned and valid on a device. Once the device authenticates

5、 on the network, it also counts against CPPM capacity Ex: Any 10 devices in 7 days = 10 COB + 10 CPPMClearPass OnGuard OnGuard licenses are consumed as shown below for posture or device health-checkingEx: Same 10 devices in 7 days = 10 COG + 10 CPPM Diff. 10 devices in 7 days = 70 COG + 70 CPPM One

6、device can also consume COG + COB, while only consuming CPPM capacity onceClearPass Enterprise Enterprise is a shared pool of licenses for Guest, Onboard & OnGuard License behavior is based on the feature its intended for useClearPass QuickConnectLicensing is consumed per unique endpointIt does not

7、require CPPM to functionEx: 100 devices = 100 CPQCClearPassChallenge: Explain the followingLicense TypeLicense CountAAA4000 (unique devices)Guest1000 (unique devices/day, consumes 7x CPPM license)Onboard4000 (unique devices)OnGuard3000 (of Onboarded devices require OnGuard)Policy Manager4000 + 7000

8、+ 4000 = 15,000 (unique devices counted)ClearPass How many CPPM boxes should we add? In what case do we not need additional boxes?Next StepsCreate a licensing site ID + Go to the License Site For incorrect or misplaced permanent license keys, emailOrder EntryTo request technical assistance, contactA

9、ruba Technical Supportoremail the Licensing team Only license certificates of the same type can be transferred to a new controller (with TAC help)AppendixClearPass ProductPolicy ManagerPerpetualAuthenticating endpointsWarning + admin lockoutAAA, replace ACSYesavg every 7 daysOnGuardPerpetual/ Subscr

10、iptionAuthenticating endpointsWarning + admin lockoutNAC, posture, healthYesavg every 7 daysGuestPerpetual/ SubscriptionAuthenticating endpointsWarning + admin lockoutGuest accessYesDaily, avg every 7 daysOnBoardPerpetual/ SubscriptionAuthenticating endpointsWarning + admin lockoutBYOD provisioningYesAvg. dailyServices cease upon limitQuickConnectSubscript