Dell Networking W-ClearPass Policy Manager 6.0, User Manual

Page: 262 / 372

262 Dell Networking W-ClearPass Policy Manager 6.0 | User Guide
Container Description
DNS: Primary DNS Primary DNS for name lookup
DNS: Secondary
DNS Secondary DNS for name lookup
AD Domains Displays a list of joined active directory domains Select Join Domain to join an Active
Directory domain. See below.
Multiple Active Directory Domains
You can join CPPM to an Active Directory domain to authenticate users and computers that are members of an
Active Directory domain.
Users can then authenticate into the network using 802.1X and EAP methods, such as PEAP-MSCHAPv2, with
their own their own AD credentials.
Joining CPPM to an Active Directory domain creates a computer account for the CPPM node in the AD database.
If you need to authenticate users belonging to multiple AD forests or domains in your network, and there is no trust
relationship between these entities, then you must join CPPM to each of these untrusting forests or domains.
NOTE: There is no need to join CPPM to multiple domains belong to the same AD forest because a one-way trust relationship exists
between these domains. In thsi case, you join CPPM to the root domain.
Join Domain - Click on this button to join this Policy Manager appliance to an Active Directory domain.
Leave Domain - Click on this button to disassociate this Policy Manager appliance from an Active Directory
domain.
NOTE: For most use cases, if you have multiple nodes in the cluster, you must join each node to the same Active Directory domain.