topic Re: aerohive AP as radius server, linked to AD in Aerohive Migrated Content

aerohive AP as radius server, linked to AD

mat_do — Fri, 13 Sep 2019 21:46:26 GMT

Hello,

following this guide : https://thehivecommunity.aerohive.com/s/article/Radius-SSID-in-NG

i was able to configure an Aerohive AP as Radius Server linked to External Active Directory.

only problem : i can login to the SSID with my credentials if I enter them manually, this works, but it doesn't work if i choose "use my windows account" so my credentials are used automatically.

Am I missing something?

Re: aerohive AP as radius server, linked to AD

samantha_lynn — Sat, 14 Sep 2019 03:36:17 GMT

Are you seeing the request logged in the Radius server when you try to log in with the windows account?

Re: aerohive AP as radius server, linked to AD

dparsons — Tue, 17 Sep 2019 00:37:56 GMT

Also use client monitor to watch the connections. You can see the credentials as they are sent to the radius server. Log on manually and automatically to see the difference in the request. Also ensure that the windows settings are set for user and not device under Advanced Settings on the Security tab of your wireless settings.

Re: aerohive AP as radius server, linked to AD

mat_do — Tue, 17 Sep 2019 19:06:48 GMT

your reply makes me ask another question : we would prefer an authentication by computer name in active directory, and not username, it is feasible on hivemanager ng?

Re: aerohive AP as radius server, linked to AD

samantha_lynn — Thu, 19 Sep 2019 01:13:39 GMT

It is possible to use the computer name but that would be something you set up on your AD, the APs are just passing traffic to and from the clients when you're using an external user data base, so we should be able to use a computer name without issue as long as the AD is set up that way.

Re: aerohive AP as radius server, linked to AD

dparsons — Wed, 25 Sep 2019 01:48:31 GMT

There is one caveat that you need to meet, you must be using only one domain and if you are using a proxy the realm must be pointed to the NPS servers by the default entry. Aerohive proxies cannot redirect by device domain membership, only username membership, so all requests must point to the NPS server using the "default" entry. Then as long as the device is a member of the domain and you have the NPS server set up to authenticate it then it should work.

Re: aerohive AP as radius server, linked to AD

itmanager2 — Mon, 02 Dec 2019 10:05:44 GMT

I believe the OP isn't using NPS as the Aerohive is the RADIUS server in their configuration.

Not sure if that affects the group membership filtering limitations.

Cheers

Ian