topic RE: XIQ & Control: defining RADIUS supplicants on XIQ APs in a location manually or via priority in Hero Product Suggestions

XIQ & Control: defining RADIUS supplicants on XIQ APs in a location manually or via priority

Volker_Kull — Mon, 01 Mar 2021 20:40:00 GMT

Integration of XIQ APs into XMC control (NAC) for AAA needs to preconfigure possible RADIUS supplicants in control. This is the base to communicate from AP via RADIUS to control. Having hundreds of APs in a location (site) they all are possible Radius supplicants and have been a RADIUS client in XMC/Control. This is hard work, difficult to configure and blocks a lot of licenses. It brings unneeded amount of rows into devices list.

Why not enable an option to select manually or via priotity parameter the RADIUS feature on site/location APs? Adding a static lease for these supplicant APs to DHCP server will end up in a useful solution without importing all APs …

Comments and ideas welcome.

Volker

RE: XIQ & Control: defining RADIUS supplicants on XIQ APs in a location manually or via priority

Thomas_Gfeller — Mon, 01 Mar 2021 22:08:00 GMT

Hi Volker

If i am right, we used the RadSec Proxies as the Radius Client so we had not to add all APs into XMC/ Control. But these are still defined by XIQ in the background and are not determinable by the Admin i guess (it was so from 1year ago).

Nevertheless, i think it would be great if there is a way to simplify that by giving the administrator the choice of which AP should be the radius client….maybe it hasent to be a physical AP, it could be something like an virtual IP address which is in charge for sending the Radius Messages (i know that other vendors implemted it like that) so we havent to worry about which AP should be the Radius Clients...

Regards

Tom

RE: XIQ & Control: defining RADIUS supplicants on XIQ APs in a location manually or via priority

Volker_Kull — Tue, 02 Mar 2021 00:17:00 GMT

Thomas,

that is a very good option or extension. It could work like the VIP in VRRP…

Additionally we would not need the static DHCP entry for the defined Radius supplicants (APs).

Volker

RE: XIQ & Control: defining RADIUS supplicants on XIQ APs in a location manually or via priority

AlexN — Thu, 18 Mar 2021 22:49:00 GMT

May I propose one thing here ?

mgmt subnet/vlan for APs (and switches) should be separate
DHCP in mgmt VLAN should be configured for long enough lease times, so that no static assignments are needed
it’s simple to script discovery/addition of APs to Control Engines/groups

RE: XIQ & Control: defining RADIUS supplicants on XIQ APs in a location manually or via priority

AlexN — Thu, 01 Apr 2021 21:03:00 GMT

Gents,

final answer on this one: no, it’s not planned as XIQ and Control APIs allow you to automate it pretty easily.

dump all APs from XIQ
add them into Control or remove APs that are no longer in XIQ
Repeat on scheduled basis