
ClearPass Guest 3.9 | Deployment Guide Onboard | 57
Figure 8 Detailed View of the ClearPass Onboard Network Architecture
The components shown in Figure 8 are:
1. Users bring different kinds of client device with them. Onboard supports “smart devices” that use the
iOS or Android operating systems, such as smartphones and personal tablets. Onboard also supports the
most common versions of Windows and Mac OS X operating systems found on desktop computers,
laptops and netbooks.
2. The Onboard workflow is used to provision the user’s device securely and with a minimum of user
interaction. The provisioning method used depends on the type of device.
a. Newer versions of Mac OS X (10.7 and later) and iOS devices use the “over-the-air” provisioning
method.
b. Other supported platforms use the “Onboard provisioning” method.
3. Once provisioned, client devices use a secure authentication method based on 802.1X and the
capabilities best supported by the device.
a. The unique device credentials issued during provisioning are in the form of an EAP-TLS client
certificate for iOS devices and OS X (10.7+) devices.
b. Other supported devices are also issued a client certificate, but will use the PEAP-MSCHAPv2
authentication method with a unique username and strong password.
4. Administrators can manage all Onboard devices using the certificate issued to that device.
Network Architecture for Onboard when Using ClearPass Guest
ClearPass Guest supports the provisioning, authentication, and management aspects of the complete
Onboard solution.
Figure 9 on page 58 shows the high-level network architecture for the Onboard solution when using
ClearPass Guest as the provisioning and authentication server.
Kommentare zu diesen Handbüchern