request services user-identification authentication-source aruba-clearpass user-query
Syntax
request services user-identification authentication-source authentication-source user-query address ip-address
Description
Manually send to the ClearPass website a request for user authentication and identity information for an individual user. The command specifies the IP address of the user’s device to identify the user whose information you want to obtain. If the user query command executes successfully, an entry for the user (IP address) has been created in the ClearPass authentication table, and no output is displayed.
The user query function is part of the SRX Series integrated ClearPass authentication and enforcement feature. The user query function, if configured, allows the SRX Series Firewall to send requests for individual user information. This command also allows you to manually send requests. Normally administrators send query requests manually to troubleshoot issues.
The user query function supplements use of the Web API function. The SRX Series Firewall exposes to ClearPass a Web API that ClearPass uses to send POST request messages to the SRX Series Firewall. These messages contain user authentication and identity information.
Options
| ip-address | The IP address of the user’s device for whom you are manually requesting authentication information. Note:
Starting with Junos OS Release 15.1X49-D130, SRX Series Firewall can query ClearPass for IPv6 addresses, in addition to IPv4 addresses for an individual user. |
Required Privilege Level
maintenance
Sample Output
request services user-identification authentication-source authentication-source user-query address ip-address
user@host> request services user-identification authentication-source aruba-clearpass user-query address 40.0.0.1 user@host> request services user-identification authentication-source aruba-clearpass user-query address 2001:db8:4136:e378:8000:63bf:3fff:fdd2
Release Information
Command introduced in Junos OS Release 12.3X48-D30.