topic Re: Google 802.1x Radius Authentication in ExtremeCloud IQ

Google 802.1x Radius Authentication

KevinP1 — Wed, 21 Oct 2020 02:22:09 GMT

I’ve search but haven’t found an article of how to implement Google domain device or user 802.1x radius authentication with ExtremeCloud IQ. Is there anyone that could point me in the right direction on how to do this properly?

Re: Google 802.1x Radius Authentication

SamPirok — Wed, 21 Oct 2020 23:00:13 GMT

I’m not personally familiar with Google domain devices but if you’re using Google as your AD, this guide should walk you through how to set up 802.1x using an external AD source: https://extremeportal.force.com/ExtrArticleDetail?an=000080075&q=802.1x%20xiq

Re: Google 802.1x Radius Authentication

KevinP1 — Thu, 22 Oct 2020 22:39:11 GMT

Unfortunately, Google doesn’t allow or supply any Hostname or IP info for external Radius connections. However, other manufacturers allow SAML and Google Authentication services natively; might be a worthy addition

I did find this from Google, so since we can’t connect through IQ we would need to go this route:

“Chrome devices support 802.1x authentication via certificates that are installed for each user on the device. Device-level 802.1x certificates are not supported. You need to be on the network to download the certificate for each user. Therefore, you should set up an open WPA/WPA2-PSK network, or use USB-to-Ethernet adapters to load the certificates on the device.”

Thanks Sam for your quick reponse and I’m happy to see that you’re back

Re: Google 802.1x Radius Authentication

jnesci — Thu, 21 Jan 2021 22:27:27 GMT

Sam,

The link you provided is for email notifications in Hivemanager, nothing to do with Radius authentication. Can you repost your liink?

Re: Google 802.1x Radius Authentication

SamPirok — Thu, 21 Jan 2021 23:00:57 GMT

Hi Jnesci, thank you for letting me know, we had to update all the article links a couple weeks ago when we activated a new knowledge base system, looks like some of the links got a bit mismatched. Here is the correct link, option 2 reviews the set up when using an external user database (AD): https://extremeportal.force.com/ExtrArticleDetail?an=000080075&q=802.1x%20xiq