09-25-2020 10:17 AM
Hi,
in one of our offices we have deployment with 3 Aerohive access points and one of them serves as a RADIUS server. We integrated it with our Active Directory and doing simple LDAP queries to it. We need to change settings so that in future queries would use LDAPS instead of LDAP.
My question is - is it enough to just check the box in front of Enable TLS encryption and that should do it or is there any other configuration changes that needs to be done (see picture)?
09-25-2020 01:49 PM
There is the following note in the help guide for XIQ regarding enabling TLS Authentication: Before configuring TLS authentication between the RADIUS server/LDAP client and the LDAP server, you must import the following files: (1) the CA certificate that the LDAP server is using, (2) an LDAP client certificate issued by that CA for the Extreme Networks device to use, and (3) the private key that corresponds to the LDAP client certificate.
You can read more about that on this page: http://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/configuring-ldap-serv...