Dell Powerconnect W-ClearPass Hardware Appliances User manual

Dell Networking
W-ClearPass
Policy Manager 6.0
Quick Start Guide

Mar 2013 | 0511278-01 Dell Networking W-ClearPass Policy Manager 6.0 | Quick Start Guide
Copyright Information
Copyright
© 2013 Aruba Networks, Inc. Aruba Networks trademarks include the Aruba Networks logo, Aruba Networks®, Aruba
Wireless Networks®, the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management
System®. Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc.
All rights reserved. Specifications in this manual are subject to change without notice.
Originated in the USA. All other trademarks are the property of their respective owners.
Open Source Code
Certain Aruba products include Open Source software code developed by third parties, including software code
subject to the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other Open
Source Licenses. Includes software from Litech Systems Design. The IF-MAP client library copyright 2011
Infoblox, Inc. All rights reserved. This product includes software developed by Lars Fenneberg, et al. The Open
Source code used can be found at this site:
http://www.arubanetworks.com/open_source
Legal Notice
The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to terminate
other vendors’ VPN client devices constitutes complete acceptance of liability by that individual or corporation for
this action and indemnifies, in full, Aruba Networks, Inc. from any and all legal actions that might be taken against it
with respect to infringement of copyright on behalf of those vendors.

Dell Networking W-ClearPass Policy Manager 6.0 | Quick Start Guide 3
Contents
Configuring Policy Manager 5
Installing Policy Manager 5
Server Port Overview 5
Server Port Configuration 5
A Subset of Useful CLI Commands 7
Accessing Policy Manager 9
Accessing Help 10
Checking Basic Services 11
802.1x Wireless Use Case 13
Configuring the Service 13
Web Based Authentication Use Case 19
Configuring the Service 19
MAC Authentication Use Case 25
Configuring the Service 26

4 Dell Networking W-ClearPass Policy Manager 6.0 | Quick Start Guide

Dell Networking W-ClearPass Policy Manager 6.0 | Quick Start Guide 5
Chapter 1
Configuring Policy Manager
This Quick Start Guide for the Dell Networking W-ClearPass Policy Manager System (Policy Manager) describes the
steps for installing the appliance using the Command Line Interface (CLI) and using the User Interface (UI) to ensure
that the required services are running.
Installing Policy Manager
The Policy Manager server requires initial port configuration.
Server Port Overview
Policy Manager Backplane
P—Power Button; A—Serial port; B—Management port; C—Data port
as described in the following table:
Key Port Description
A Serial Configures the Policy Manager appliance initially, via hardwired
terminal.
B - eth1 Management (gigabit
Ethernet)
Provides access for cluster
administration and appliance
maintenance via web access, CLI, or
internal cluster communications.
Configuration required.
C - eth2 Data (gigabit Ethernet)
Provides point of contact for RADIUS,
TACACS+, Web Authentication and
other data-plane requests.
Configuration optional. If not
configured, requests redirected to the
management port.
Server Port Configuration
Before starting the installation, gather the following required information:

6 Dell Networking W-ClearPass Policy Manager 6.0 | Quick Start Guide
Required Item Item Information
Hostname (Policy Manager
server)
Management Port IP Address
Management Port Subnet Mask
Management Port Gateway
Data Port IP Address (optional) Data Port IP Address must not be in the same subnet as
the Management Port IP Address
Data Port Gateway (optional)
Data Port Subnet Mask
(optional)
Primary DNS
Secondary DNS
NTP Server (optional)
To set up the Policy Manager appliance:
1. Connect and power on.
Using the null modem cable provided, connect a serial port on the appliance to a terminal, then connect power
and switch on. The appliance immediately becomes available for configuration.
Use the following parameters for the serial port connection:
lBit Rate: 9600
lData Bits: 8
lParity: None
lStop Bits: 1
lFlow Control: None
2. Login.
Later, you will create a unique appliance/cluster administration password. For now, use the preconfigured
credentials:
login: appadmin
password: eTIPS123
This starts the Policy Manager Configuration Wizard.
3. Configure the appliance.
Replace the bolded placeholder entries in the following illustration with your local information:
Enter hostname: hyperion.us.arubanetworks.com
Enter Management Port IP Address: 192.168.5.10
Enter Management Port Subnet Mask: 255.255.255.0
Enter Management Port Gateway: 192.168.5.1
Enter Data Port IP Address: 192.168.7.55
Enter Data Port Subnet Mask: 255.255.255.0
Enter Data Port Gateway: 192.168.7.1
Enter Primary DNS: 198.168.5.3

Enter Secondary DNS: 192.168.5.1
4. Change your password.
Use any string of at least six characters:
New Password:************
Confirm Password:************
Going forward, you will use this password for cluster administration and management of the appliance.
5. Change system date/time.
Do you want to configure system date time information [y|n]: y
Please select the date time configuration options.
1) Set date time manually
2) Set date time by configuring NTP servers
Enter the option or press any key to quit: 2
Enter Primary NTP Server: pool.ntp.org
Enter Secondary NTP Server: time.nist.gov
Do you want to configure the timezone? [y|n]: y
Once the timezone information is entered, you are asked to confirm the selection.
6. Commit or restart the configuration.
Follow the prompts:
y[Y] to continue
n[N] to start over again
q[Q] to quit
Enter the choice: Y
Successfully configured Policy Manager appliance
**************************************************************
* Initial configuration is complete.
* Use the new login password to login to the CLI.
* Exiting the CLI session in 2 minutes. Press any key to exit now.
A Subset of Useful CLI Commands
The CLI provides a way to manage and configure Policy Manager information. Refer to Appendix A: Command Line
Interface in the User Guide for more detailed information on the CLI.
The CLI can be accessed from the console using a serial port interface or remotely using SSH:
*****************************************************************************************
* *
* Dell W-ClearPass Policy Manager 6.0.2.49062 *
* *
*****************************************************************************************
Logged in as group Local Administrator
[[e-mail]]#
The following subset of CLI commands may be useful at this point:
lTo view the Policy Manager data and management port IP address, and DNS configuration:
[appadmin]# show ip
lTo reconfigure DNS or add a new DNS:
[appadmin]# configure dns <primary> [secondary] [tertiary]
lTo reconfigure or add management and data ports:
[appadmin]# configure ip <mgmt | data > <ipadd> netmask <netmask address> gateway <gateway address>
where:
Dell Networking W-ClearPass Policy Manager 6.0 | Quick Start Guide 7

8 Dell Networking W-ClearPass Policy Manager 6.0 | Quick Start Guide
Flag/Parameter Description
ip <mgmt|data> <ip address> lNetwork interface type: mgmt or data
lServer ip address.
netmask <netmask address> Netmask address.
gateway <gateway address> Gateway address.
lTo configure the date (time and time zone optional):
[appadmin]# configure date –d <date> [-t <time>] [-z <timezone>]
lTo configure the hostname to the node:
configure hostname <hostname>
lIf you are using Active Directory to authenticate users, be sure to join the Policy Manager appliance to that
domain as well.
ad netjoin <domain-controller.domain-name> [domain NETBIOS name]
where:
Flag/Parameter Description
<domain-controller. domain-
name> Required.
Host to be joined to the domain.
[domain NETBIOS name] Optional.

Dell Networking W-ClearPass Policy Manager 6.0 | Quick Start Guide 9
Chapter 2
Accessing Policy Manager
Use Firefox 3.0 (or higher) or Internet Explorer 7.0.5 (or higher) to perform the following steps:
1. Open the administrative interface.
Navigate to https://<hostname>/tips (where <hostname> is the hostname you configured during the initial
configuration).
2. Enter License Key.
3. Click on the Activate Now link.
4. Activate the product.
If the appliance is connected to the Internet, click on the Activate Now button. If not, click on the Download
button to download the Activation Request Token. Contact Dell Support and provide your technician with the
downloaded token in an email attachment. Once you receive the Activation Key from Dell Support, save it to a
known location on your computer. Come back to this screen and click on the Browse button to select the
Activation Key. Upload the key by clicking on the Upload button.
The product is now activated.

10 Dell Networking W-ClearPass Policy Manager 6.0 | Quick Start Guide
5. Login. Username: admin, Password: eTIPS123
6. Change the password.
Navigate to Administration > Admin Users, then use the Edit Admin User popup to change the administration
password.
Accessing Help
The Policy Manager User Guide (in PDF format) is built within the help system here:
https://<hostname>/tipshelp/html/en/
(where <hostname> is the hostname you configured during the initial configuration.)
All Policy Manager user interface screens have context-sensitive help. To access context-sensitive help, click on the
Help link at the top right hand corner of any screen.