Unbind Device based on PPSK

JA — Mon, 31 Aug 2026 04:25:02 GMT

I've been using this successfully for the last year or so but it has stopped working. I get "Unable to Access Data" banner on the top of the screen. I can still unbind with MAC address but this isn't as efficient due to Private Address.

I have been doing this on an AP410, was on 10.6.6 but moving it to 10.8.6 may have caused the issue. Being summer we don't do a lot of resets to it's hard to pin down.

I have tried various FW versions including the latest, tried Incognito browser, tried a different browser. Still the same.

I moved my PPSK database to another AP, which creates a new bindings database, but this hasn't helped. New AP is a 4020.

I was wondering if this has happened to anyone else? Maybe a bug.

Thanks

Re: Unbind Device based on PPSK

Raul_Carbonari — Mon, 31 Aug 2026 16:56:59 GMT

Hi Ja,

Since last week, the recommended versions have been 10.8.5f (for stability) or 10.9.1 (the latest release); please check the release notes to see if there are any fixes regarding PPSK.
I was a bit confused when you mentioned moving the user database from the AP.
If you are using PPSK with a local database, user data is stored on all APs.
If you are using PPSK with a cloud database, two APs per management segment are elected to act as RADSec proxies. The election algorithm is dynamic but can be adjusted by setting a priority on the AP.
If you are using the cloud database, it is crucial to ensure that the firewall is not blocking port 2083 and that the APs have the correct time (synchronized via NTP). RADSec relies on certificates, and time discrepancies often cause issues.

There was a bug on the AP4020 related to PPSK (CFD-15133), but it was fixed in version 10.8.5.

I hope this helps.

Raúl Carbonari

topic Re: Unbind Device based on PPSK in ExtremeCloud IQ

Unbind Device based on PPSK

Re: Unbind Device based on PPSK