Administrator Guide

ClearPass Deployment Guide Rev. 02 | June 2016
Adding Active Directory as an Authentication Source to W-ClearPass 100
About Authorization 101
User Objects 101
About the Bind Operation 101
Adding Active Directory as an Authentication Source 101
Obtaining and Installing a Signed Certificate From Active Directory 108
About Certificates in W-ClearPass Deployments 108
How to Obtain a Signed Certificate from Active Directory 109
Creating a Certificate Signing Request 109
Importing the Root CAFiles to the Certificate Trust List 112
Obtaining a Signed Certificate from Active Directory 113
Importing a Server Certificate into W-ClearPass 117
Manually Testing Login Credentials Against Active Directory 118
Preparing for 802.1X Wireless Authentication with Active Directory 119
About 802.1X Authentication 119
Introducing 802.1X 119
802.1X Authentication Components 119
What Is AAA? 121
Authentication 121
Authorization 121
Accounting 121
Configuring 802.1X Wireless Authentication with Active Directory 121
Authenticating Against Active Directory 122
About the 802.1X Wireless Service 122
Creating the 802.1X Wireless Service 123
Deleting a W-ClearPass Policy Manager Service 127
Walking Through an 802.1X Authentication Scenario 128
802.1X Wireless Authentication Traffic Flow 128
Walking Through the 802.1X Authentication Process 128