Driver Support Document

Aruba ClearPass policy managers, OS version 6.x

Show Tested Devices Grid

SYSOID Mapping
SYSOID MODEL OS VERSION
 1.3.6.1.4.1.8072.3.2.10 CP-HW-500 6.6.3

Driver Features Support Grid

Driver FeaturesAccess Methods
(X signifies feature support)CLISNMPTFTPCLI+TFTPSNMP+TFTPFTPCLI+FTPSNMP+FTPCLI+SFTPSCPCLI+SCPSNMP+SCPHTTP/HTTPS
X Driver Discovery release notes X X                      
X General Access  
(CLI protocols: ssh1, ssh2, console)
Supports SecurID
X                        
Configuration
X Retrieve Running Configuration release notes X                        
  Retrieve Startup Configuration                            
  Retrieve Binary Configuration                            
X Device information parsing  
X Enhanced Layer2 Basic IP information parsing  
  Configuration Deployment to Running                            
  Configuration Deployment to Startup                            
  Binary Configuration Deployment                            
Diagnostics
  Routing Table                            
  OSPF Neighbors                            
X Interfaces   X                        
  Modules and Inventory                            
  Flash Storage Space                            
  File System                            
X Uptime   X X                      
  ICMP Test                            
  Topology Parsing                            
  Duplex Parsing                            
  Enhanced VLAN Parsing  
Features
  Software Center                            
  Software Image Synchronization                            
  Password Management  
(Can modify: limited username, limited password, full username, full password, read-only community strings, read/write community strings)
                         
  Syslog Configuration and Change Detection                              
X Custom Scripts and Diagnostics  
Bulk deploy available
X                        
  ACL Parsing  
  ACL Provisioning                            
  VLAN Provisioning                            
X Configlet Parsing  
X QoS Parsing  
  VRF Parsing  
  Context Management                            

Retrieve Running Configuration

Release Notes

Username for binary configuration collection

Clearpass devices can use separate authentication for HTTP and CLI login. The driver collects the binary configuration from the HTTP interface, and will use the username "admin" by default coupled with the normal user password provided. To use a different default username, set the device access variable "http_username" to the selected user account. To use a different password than the default password credential, set the enable password to the credential to be used for HTTP.

Binary checksum inclusion in text config

Some devices may have their binary configurations change with the text configuration remaining the same. In this case, the new binary will not be stored. To force the storing of the binary configuration, set the device access variable "add_checksum" to "true" and the binary length will be appended to the text configuration, causing it to be stored whenever the binary configuration changes.

return to top

Driver Discovery

Release Notes

More prompt causes an unexpected disconnection

Discovery tasks for Javascript drivers handle More prompts by using timeouts, which can cause problems with the third-party SSH client code, which interprets the timeout as a disconnection. There are two options to work around the problem. Setting the RCX option [<option name="Driver/Discovery/UsePollRead">true</option>] in site_options.rcx will effect the workaround for all affected devices. Alternatively, it could be applied to a single device by setting the device access variable "PollRead" to "true".

Wakeup Ctrl-U character can cause discovery to fail

Discovery tasks for Javascript drivers use wakeup characters are sent during device connection, to ensure that the device is responding. Normally, these characters do not echo to the console, but some devices may echo them. In this case, this causes the prompt detection phase to fail, which in turn can cause More prompts to not be handled properly, and discovery may fail. If these characters are echoed from the device [check the session log to see this], then set the device access variable "skip_ctrl_u" to skip the sending of the wakeup characters. Note that setting this option on a previously working device could cause discovery tasks to fail, but it only affects CLI discovery. SNMP discovery is unaffected.

return to top