https://community.extremenetworks.com/t5/extremewireless-general/802-1x-radius-chromebooks/m-p/39665#M2326 When we built our wireless network in 2011 the best way to auth from Active Directory was to run through a radius proxy. It appears now that that is no longer needed in the 9.x controller. I have 2 domains, and I have been successfully authenticating directly from ldap and not radius proxy on my smaller domain.<BR /> <BR /> Before I move my primary domain to direct ldap auth, I wanted to see if anyone else has set this up lately and can offer advice about doing away with radius proxy. In a 9.X environment, with AD auth, is there any reason to keep radius in the picture at all?<BR /> <BR /> Also, I am planning on rolling out chromebooks that will be in a cart for student use. I want to get them to auth with 802.1X with their credentials. It is essential to be to make the login fast (avoid a portal login) and to have per user accounting (I have userid tagged to a firewall)<BR /> <BR /> Has anyone setup 1X auth to a chromebook? Any advice?<BR /> <BR /> --Keith<BR /> <BR /> Fri, 17 Apr 2015 18:43:00 GMT Keith_Obermeier 2015-04-17T18:43:00Z https://community.extremenetworks.com/t5/extremewireless-general/802-1x-radius-chromebooks/m-p/39665#M2326 When we built our wireless network in 2011 the best way to auth from Active Directory was to run through a radius proxy. It appears now that that is no longer needed in the 9.x controller. I have 2 domains, and I have been successfully authenticating directly from ldap and not radius proxy on my smaller domain.<BR /> <BR /> Before I move my primary domain to direct ldap auth, I wanted to see if anyone else has set this up lately and can offer advice about doing away with radius proxy. In a 9.X environment, with AD auth, is there any reason to keep radius in the picture at all?<BR /> <BR /> Also, I am planning on rolling out chromebooks that will be in a cart for student use. I want to get them to auth with 802.1X with their credentials. It is essential to be to make the login fast (avoid a portal login) and to have per user accounting (I have userid tagged to a firewall)<BR /> <BR /> Has anyone setup 1X auth to a chromebook? Any advice?<BR /> <BR /> --Keith<BR /> <BR /> Fri, 17 Apr 2015 18:43:00 GMT https://community.extremenetworks.com/t5/extremewireless-general/802-1x-radius-chromebooks/m-p/39665#M2326 Keith_Obermeier 2015-04-17T18:43:00Z https://community.extremenetworks.com/t5/extremewireless-general/802-1x-radius-chromebooks/m-p/39666#M2327 If you use also the Extreme Networks NAC solution you can do it as I did at one of my customers. They had 2 complete different domains with NO trust between. Depending on the damain with the user logon we sent it via NAC rule matrix to the correct DC.<BR /> <BR /> For this use the NAC Gatway(s) as Radius Proxy.<BR /> <BR /> Fri, 17 Apr 2015 19:11:00 GMT https://community.extremenetworks.com/t5/extremewireless-general/802-1x-radius-chromebooks/m-p/39666#M2327 Rainer_Adam 2015-04-17T19:11:00Z