Solved

Authenticate and AP to a switchport

  • 10 November 2020
  • 3 replies
  • 64 views

Is it possible to authenticate an XIQ Cloud AP against a switch port?

A similar question was raised some years ago, and it was not a feature:

https://getsatisfaction.com/aerohive/topics/how_do_i_authenticate_and_authorize_aerohive_ap_to_switchport_via_802_1x

 

This is a preferred requirement for a customer, which wishes to improve port security, to prevent a unknown device from accessing the switch port and any VLANs in the trunk.

 

 

icon

Best answer by Sam Pirok 10 November 2020, 14:29

It looks like you can do this by going to Configure> Opening the network policy> Going to Device Templates within the network policy> Choose Switch Templates> Open the one you’re using or create a new template> Go to Port Configuration (left hand side menu)> Select the port in question> Click Assign> New port configuration> Under the Port Usage Settings section there is a subsection called Wired Connectivity, toggle this to ON> Then you should see the option for setting up Radius authentication for that port. Does that look like what you were looking for? 

 

This page has more details on that section: https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/configuring-switch-ports.htm

View original

3 replies

Userlevel 5

It looks like you can do this by going to Configure> Opening the network policy> Going to Device Templates within the network policy> Choose Switch Templates> Open the one you’re using or create a new template> Go to Port Configuration (left hand side menu)> Select the port in question> Click Assign> New port configuration> Under the Port Usage Settings section there is a subsection called Wired Connectivity, toggle this to ON> Then you should see the option for setting up Radius authentication for that port. Does that look like what you were looking for? 

 

This page has more details on that section: https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/configuring-switch-ports.htm

Thanks, the goal is to have the AP authenticate itself as the radius client to the switch port. 
will this work when the switch is another vendor’s switch. 
 

Userlevel 5

I can’t really speak to other vendor’s switch functionality, you may need to ask the switch vendor directly. 

Reply