topic Re: Any possible to config one ap as ppsk server? in ExtremeWireless (IQE)

Any possible to config one ap as ppsk server?

zlinuxboy — Mon, 26 Jul 2021 00:06:02 GMT

There is a small environment, 4 ap will enough. I prefer to use ppsk local as authentication method, but it's a annoyingly to update user on each ap individually, so any possible to config one of AP as ppsk server, the others AP will query it when authentication. Then I could update user info only once.

By the way, ppsk local is my favor, not ppsk cloud.

Re: Any possible to config one ap as ppsk server?

SamPirok — Mon, 26 Jul 2021 20:32:24 GMT

When using PPSK local, unfortunately you will need to update each AP when adding a new user, there is no way to designate one AP to be a type of PPSK server for the others.

Re: Any possible to config one ap as ppsk server?

zlinuxboy — Thu, 29 Jul 2021 23:13:22 GMT

Than except ppsk cloud, how to implement ppsk’s user db on-premise as single source of truth?

Re: Any possible to config one ap as ppsk server?

SamPirok — Mon, 02 Aug 2021 23:19:32 GMT

When using local DB storage for your PPSK user credentials, each AP acts as it’s own user database. You’ll have to update each AP (i.e. each PPSK independent database) each time you add or alter user credentials. The only way to avoid this would be to use cloud based storage for your PPSK credentials.

Re: Any possible to config one ap as ppsk server?

zlinuxboy — Mon, 02 Aug 2021 23:30:12 GMT

@Sam Pirok

The ppsk cloud have a drawback, if the wan link broken, then the whole ap system will down.

Then if going to implement use db on premise, the only choise is 802.1x+radius?

Re: Any possible to config one ap as ppsk server?

SamPirok — Tue, 03 Aug 2021 00:56:47 GMT

If you’re anticipating frequent changes to your user database, and cloud based DB storage is not an option, then yes I’d suggest going with Radius instead.