ClearPass NAC & Portal Setup

I’m rolling out a new Aruba ClearPass environment that will secure both sides of our network—wired switches and wireless access points alike. The core goal is to establish robust Network Access Control with ClearPass Policy Manager while leveraging ClearPass OnGuard for endpoint posture assessment.

Key elements of the job
• Build or refine ClearPass policies for 802.1X-based authentication and authorization on all wired and wireless edge ports.
• Integrate ClearPass OnGuard to check endpoint health (antivirus, OS patch level, etc.) before granting production-network access.
• Stand up a captive portal that presents only to guest devices and seamlessly hands them off to an isolated VLAN after successful self-registration. Internal users should continue to authenticate transparently via 802.1X without ever seeing the portal.
• Coordinate switch (ArubaOS-CX) and controller/AP (ArubaOS 8.x/10.x) configurations so policy enforcement is consistent across infrastructure.

Acceptance criteria
1. A test laptop on the wired LAN receives a dynamic ClearPass role based on posture status.
2. A corporate laptop on Wi-Fi authenticates with 802.1X and lands on the secure employee VLAN.
3. A guest phone associating to the “Guest” SSID is redirected to the captive portal, completes registration, and browses the internet while remaining isolated from internal subnets.
4. ClearPass dashboards display posture, authentication, and accounting data for all three scenarios.

Provide documented CLI or GUI steps, exported ClearPass service definitions, and any required switch/controller snippets so I can reproduce the setup in other sites. Let me know your estimated timeline and any prerequisites you’ll need from my side (certs, RADIUS secrets, switch access, etc.).