topic Re: Authenticate and AP to a switchport in ExtremeCloud IQ

Authenticate and AP to a switchport

jason_hills — Tue, 10 Nov 2020 09:04:17 GMT

Is it possible to authenticate an XIQ Cloud AP against a switch port?

A similar question was raised some years ago, and it was not a feature:

https://getsatisfaction.com/aerohive/topics/how_do_i_authenticate_and_authorize_aerohive_ap_to_switchport_via_802_1x

This is a preferred requirement for a customer, which wishes to improve port security, to prevent a unknown device from accessing the switch port and any VLANs in the trunk.

Re: Authenticate and AP to a switchport

SamPirok — Tue, 10 Nov 2020 21:29:32 GMT

It looks like you can do this by going to Configure> Opening the network policy> Going to Device Templates within the network policy> Choose Switch Templates> Open the one you’re using or create a new template> Go to Port Configuration (left hand side menu)> Select the port in question> Click Assign> New port configuration> Under the Port Usage Settings section there is a subsection called Wired Connectivity, toggle this to ON> Then you should see the option for setting up Radius authentication for that port. Does that look like what you were looking for?

This page has more details on that section: https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/configuring-switch-ports.htm

Re: Authenticate and AP to a switchport

jason_hills — Wed, 11 Nov 2020 02:08:08 GMT

Thanks, the goal is to have the AP authenticate itself as the radius client to the switch port.
will this work when the switch is another vendor’s switch.

Re: Authenticate and AP to a switchport

SamPirok — Thu, 12 Nov 2020 00:56:43 GMT

I can’t really speak to other vendor’s switch functionality, you may need to ask the switch vendor directly.