topic NAC Using Extreme Platform ONE Security and E1120 Controller in ExtremeWireless (General)

NAC Using Extreme Platform ONE Security and E1120 Controller

rortega — Wed, 25 Mar 2026 20:25:46 GMT

Hi,

I have a customer with an existing WLAN based on AP505i access points and an E1120 controller. This year, we are planning to expand the WLAN with Wi-Fi 7 access points managed through Extreme Platform ONE.

We understand that the AP505i cannot be managed from the cloud, so the customer would eventually have two separate management environments: cloud management for the Wi-Fi 7 APs, and on-premises management for the Wi-Fi 6 APs. This scenario has already been accepted by the customer.

Our main question is about WLAN NAC deployment.

We are evaluating Extreme Platform ONE Security with the Security Tier license, but we are not sure how this would work in a mixed environment where part of the WLAN is managed on-premises and part from the cloud.

We assume Platform ONE Security should work well for the Wi-Fi 7 network, but what would happen with the Wi-Fi 6 network that is still running with the on-premises controller?

Would we need a RADIUS proxy to support NAC authentication for the controller-managed WLAN? Also, is it possible to integrate the cloud-based NAC directly with the controller, without using a RADIUS proxy?

Any guidance or best practices for this type of mixed deployment would be appreciated.

Re: NAC Using Extreme Platform ONE Security and E1120 Controller

Raul_Carbonari — Wed, 25 Mar 2026 22:06:35 GMT

Hi Rortega,

As far as I remember, EP1 Security doesn't have native integration with XIQ-C.
Depending on the number of APs involved, the most suitable approach would be to control everything through XIQ-C, using the internal NAC.
If you still want to keep XIQ and XIQ-C, there's the possibility of treating XIQ-C as a third-party solution in ZTNA (EP1 Security), but using XIQ-SE + NAC should certainly be simpler at this point as it's a more mature solution.

Regardless, and now talking about hardware, it's not good to mix the deployment of APs in the same coverage areas, as newer clients (WiFi 7) will prefer to connect to the new APs rather than the 505i.

The latest version of XIQ-C already supports the AP5020 and AP5022, and will soon also support PPSK.

I hope this helps.

Raúl Carbonari

Re: NAC Using Extreme Platform ONE Security and E1120 Controller

Raul_Carbonari — Wed, 25 Mar 2026 22:22:55 GMT

Hi rortega,

I’ve just reviewed the hardware, and the E113O reaches End-of-Software-Maintenance (EOSM) on 4/15/2026, while the AP505i reaches EOSM on 1/15/2027.

Replacing them might be the better path if the client isn't overly concerned about the budget. Given that the 505i are WiFi 6 and everything is moving toward WiFi 7, a complete refresh makes sense, assuming most of their devices are WiFi 7-ready.

Raúl Carbonari

Re: NAC Using Extreme Platform ONE Security and E1120 Controller

rortega — Thu, 26 Mar 2026 19:12:14 GMT

Hi Raúl,

Thank you again for the clarification.

Based on your comment about the possibility of treating XIQ-C as a third-party solution in EP1 Security, I would like to clarify one more point:

If we go in that direction, should we consider deploying a RADIUS Proxy in order to establish communication between XIQ-C and EP1 Security, or is it possible to integrate them directly without the proxy?

I would appreciate any guidance on whether this type of integration is supported, and if so, what the recommended approach would be.

Thanks again.

Re: NAC Using Extreme Platform ONE Security and E1120 Controller

Raul_Carbonari — Thu, 26 Mar 2026 20:25:33 GMT

Hi,
Unfortunately, I haven't implemented ZTNA yet, and I don't have all the details, but the XIQ-C has RADSEC support, so I imagine it's eventually possible to connect directly.

The proxy solution is for cases where the device doesn't have that capability.

I took a look at the documentation, but there's nothing specific about the XIQ-C. Perhaps it's necessary to contact SE or open a case with GTAC. https://documentation.extremenetworks.com/Extreme%20Platform%20ONE%20Security%20v25.5.0%20User%20Guide/downloads/Extreme_Platform_ONE_Security_25_5_0_User_Guide.pdf

Regards,

Raúl Carbonari