topic RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ? in ExtremeWireless (General)

B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Valter_Veiga — Sat, 06 May 2017 18:26:00 GMT

What's the AP behavior with a VNS B@AP, 802.1x encryption and 2 Radius per SItes mode when the controller loss ?

Will it contínuos to accept and authenticate new 802.1x Users ?

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Ronald_Dvorak — Sat, 06 May 2017 18:47:00 GMT

Yes, that's exactly what sites does, clients are still able to authenticate with 802.1X.

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Valter_Veiga — Sat, 06 May 2017 19:05:00 GMT

But isn't working,

I'm using V2210 firmware 10.31.01.0048 and AP3805.

With the controller UP, the APs were requesting authetication to the NPS of the site. With the controller DOWN we don't have requests. The users that were connected maintain the connection.

the document in the Gtac is not clear about sites.

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Maintain-Wireless-Services-upon-an-...

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Ronald_Dvorak — Sat, 06 May 2017 19:56:00 GMT

Have you read the user manual...
http://documentation.extremenetworks.com/wireless/v10_31/ug_new/wireless/user_guide/t_configuring_si...

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Valter_Veiga — Sun, 07 May 2017 22:18:00 GMT

OK, it should work, I will investigate why it isn't working, no request received at NPS.

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Sam — Mon, 08 May 2017 13:36:00 GMT

Hi Valter,

If you remove one of the Radius servers does it work?

- Sam

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Valter_Veiga — Mon, 08 May 2017 17:01:00 GMT

Done the troubleshooting. The problem was the Radius Server not available.

This a Long infrastructure, we have 4 Radius servers.

What hapens, is that we are only using 1 Radius Servers, because of instability when using 2 radius servers in sites config.

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Sam — Mon, 08 May 2017 17:01:00 GMT

Hi Valter,

Is this referencing a case you have open with GTAC (01292083)?

- Sam

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Valter_Veiga — Mon, 08 May 2017 17:01:00 GMT

The instability of using 2 radius servers , yes.

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Umut_Aydin — Mon, 08 May 2017 18:52:00 GMT

Hi Valter,
this is your esc..I have similar escalation and it should be fixed in
V10.31.01 - V9.21.17- V10.21.04
If you don't have this version..could you test it?

Rgds
Umut

RE: B@AP, 802.1x encryption, Radius per Sites and controller loss ?

Valter_Veiga — Mon, 08 May 2017 19:09:00 GMT

Hi Umut,

I'm running 10.31.01.0048, and it didn't resolved