I am interested in possibly setting up a radius server. however, I am still fairly new to this and I will offer what I hope is the relevant info to get an informed answer.

[AnonymousM]

We currently have 10 schools in our division that each have their own file/DHCP Server with miltiple AP's. We are using the same two SSID's (one for Staff with network resources available and one for Student with internet access only) across all locations so any staff member from any location will be able to connect to the wireless network anywhere within our organization. Currently, we are using WPA/WPA2 PSK (Personal) with a passphrase that has been shared with students or students have been able to get it from their teachers device. Regardless, we are now considering setting up a Radius Server, and I am looking for some basic info to justify selling this to my boss, but I am also in need of some guidance as to how this can be set up and deployed across multiple locations. Will I need to configure an AP to act as a Radius Server at each location (subnet)? or will I hav e to maybe configure multiple AP's to act as Radius Servers at each location if there is a chance of say 300 + connected devices at any time? Where is a good place to start with this project? We currently have just over 100 AeroHive AP's.

[AnonymousM]

VHM-W8S1ZP

[samantha_lynn]

Could you let me know your VHM ID so I can take a look at your configuration to see if any issues jump out to me? If you'd rather share this directly, my email address is communityhelp@aerohive.com.

[AnonymousM]

When attempting to connect to the staff SSID, it does prompt me to enter domain credentials. however, it does not seem to want to accept the credentials and denies connection.

[AnonymousM]

Hi again. I seem to be having some authentication issues with my Radius Server. The open guest SSID using policy acceptance and CWP seem to be working as expected. However, I am not able to connect to the staff SSID using AD Authentication. The Radius AP I have designated does have the Radius symbol next to the Host Name under the Monitor Tab. I believe all the AD Binding Configuration settings are correct, including the AD Server and DNS. But I do not know where to start to try and solve this problem. Can you please provide some assistance as to where I should be looking to correct this?

[samantha_lynn]

The NAS list is a list of APs that can contact the Radius AP with authentication requests. By default, all Aerohive APs are on the NAS list, so you wouldn't need to configure that part unless you have non-Aerohive devices requesting Radius access on behalf of client devices as well.