Configuring A Certificate Revocation List (Crl) For The Provisioned Network; Network Architecture For Onboard; Figure 7 Clearpass Onboard Network Architecture - Aruba Networks PowerConnect W Clearpass 100 Software Deployment Manual

For example, if the Onboard server's hostname is onboard.example.com, the OCSP URL to use is: http://
onboard.example.com/mdps_ocsp.php/1.
Note: OCSP does not require the use of HTTPS and can be configured to use HTTP.

Configuring a Certificate Revocation List (CRL) for the Provisioned Network

Onboard supports generating a Certificate Revocation List (CRL) that lists the serial numbers of certificates
that have been revoked.
To configure a CRL, you will need to provide its URL to your network equipment. This URL can be
constructed by using the relative path mdps_crl.php?id=1.
For example, if the Onboard server's hostname is onboard.example.com, the location of the CRL is: http://
onboard.example.com/mdps_crl.php?id=1.
Note: A certificate revocation list does not require the use of HTTPS and can be configured to use HTTP.

Network Architecture for Onboard

The high-level network architecture for the Onboard solution is shown in

Figure 7 ClearPass Onboard Network Architecture

The sequence of events shown in
1. Users bring their own device to the enterprise.
2. The ClearPass Onboard workflow is used to provision the user's device securely and with a minimum of
user interaction.
3. Once provisioned, the device re-authenticates to the network using a set of unique device credentials.
These credentials uniquely identify the device and user and enable management of provisioned devices.
4. Administrators can configure all aspects of the provisioning workflow – including the devices that have
been provisioned, policies to apply to devices and the overall user experience for BYOD.
A more detailed view of the network architecture is shown in
shows different types of client devices using the Onboard workflow to gain access to the network. Some of
the components that may be configured by the network administrator are also shown.
56 | Onboard
Figure 7 is:
Figure 7.
Figure 8 on page 57 below. This diagram
ClearPass Guest 3.9 | Deployment Guide