topic Re: A3 - Eduroam - LADP authentication in ExtremeCloud A3

A3 - Eduroam - LADP authentication

drthiruna — Sun, 05 Nov 2023 16:39:52 GMT

Hello there,

In the documentation explained ad A3 performs normal NTLM-based authentication using an AD or LDAP service.

Will A3 performs the authentication against the LDAP for the eduroam?

It the usecase it explained only about the NTLM authentication. Plz confirm me can we do authentication with G-Suite LDAP?

Re: A3 - Eduroam - LADP authentication

Zdeněk_Pala — Mon, 06 Nov 2023 13:21:56 GMT

can you please elaborate more about the use case?

usually the goal is to verify credentials against one destination = either through NTLM to AD or through Radius to Eduroam or through LDAP...

Re: A3 - Eduroam - LADP authentication

drthiruna — Tue, 07 Nov 2023 09:09:08 GMT

Configured the NAC with LDAP for the 802.1x authentication (Wi-Fi) for the Campus users. Roles are configured in the NAC and WLC.

Our users are in Googlew WS Secure LDAP.

Will NAC do authentication for the local users in remote location against the LDAP.

In documenattion it's explained as follows: "A3 performs local NTLM authentication and sends the success/failure response back to the eduroam server"

It means we can do only the NTLM authentication?

Re: A3 - Eduroam - LADP authentication

drthiruna — Thu, 09 Nov 2023 11:59:29 GMT

NAC can be configured for both local and remote eduroam-related authentication.

Our users are in Google WS Secure LDAP. Configured the NAC with LDAPs for the 802.1x authentication (EAP-TTLS-PAP) for the local Campus users. We are having a local AD, but no users in the local AD.

Will NAC do authentication of our local users when they are in remote locations thro eduroam with GWS LDAPs or MS Entra?

In documentation, it's explained as follows: "A3 performs local NTLM authentication and sends the success/failure response back to the eduroam server"

Does it mean we can do only the NTLM authentication?

In the image the port is shown as 11812. Is it correct?

If I am correct there is no need to configure the Local Connection Profile - eduroam, in case we are doing 802.1x authentication in the campus SSIDs.