Explanation:
1. The client device is connected to the switch and the port is now up.
2. MAC address is learned on the port and MAC auth is triggered.
3. ClearPass processes the MAC authentication and sends RADIUS Accept with Aruba-User- Role=PROFILING VSA.
4. The switch assigns a role with the PROFILING VLAN to the client device.
5. The client device sends DHCP DISCOVER which is relayed to ClearPass and used to update the endpoint database.
6. ClearPass sends a Change of Authorization to the switch.
7. The device is re-authenticated and the final role is assigned using the Aruba-User-Role=IoT VSA.
8. The device has network access on the IoT VLAN.
The sequence starts with the device connecting and MAC authentication triggering. ClearPass provides a profiling role, the switch assigns it, then DHCP profiling occurs. ClearPass updates its endpoint database, triggers a Change of Authorization (CoA), and re-authenticates the device with the IoT role, granting final network access.