topic Re: Authenticate AD computers in Aerohive Hive Manager (ExtremeCloudIQ) in ExtremeCloud IQ

Authenticate AD computers in Aerohive Hive Manager (ExtremeCloudIQ)

rkowals — Tue, 02 Jun 2020 23:43:43 GMT

I need the ability for any AD computers to authenticate across the network so we do not have to enter the SSID passphase/Passcode if we make changes to the SSID Profile/Policies, and reduce the number of current SSID’s.

Re: Authenticate AD computers in Aerohive Hive Manager (ExtremeCloudIQ)

w1f1n00b — Thu, 04 Jun 2020 02:08:44 GMT

This is probably a question better asked on a windows forum. You can use device AD accounts for authentication and use group policy so a computer will authenticate to an 802.1x SSID at boot. Then it can retain that authentication or re-authenticate with user credentials at login.

There are certificate options as well but I don’t know details of those methods.

Re: Authenticate AD computers in Aerohive Hive Manager (ExtremeCloudIQ)

Ronald_Dvorak — Thu, 04 Jun 2020 16:36:24 GMT

Hi,

as John mentioned the part on CloudIQ is pretty easy and most of the things are done on the RADIUS server.

Here how the settings look for my 802.1X EAP-PEAP WLAN.

The RADIUS server (in my case ExtremeControl) will reply with either VLAN 1 or 200 according to my AD/LDAP groups.

-Ron