Extreme Networks

PeterK · ‎07-23-2020

Hi,

currently it’s not possible to push a 802.1X Config to APs from XCA / XCC as it works on identifi for years.

Is it possible to do a EAP-PEAP or EAP-TLS Config (maybe via cli/ssh/scp) on Wing 7 APs, when running centalized mode?

Miguel-Angel_RO · ‎07-25-2020

Hi Peter,

I used this CLI code to enable the 802.1X PEAP per AP.

Playing with excel you can generate a lot of configs easily based on a list of serials.

As a reminder the 802.1x config in Identify is to be done per AP, so I always did that via CLI to configure it and certainly on big installations (1000+ APs).

As Tomasz mention it, it is a part of a bigger CLI config where I also fix the channels and the output power.

##########
ap
18xxy-1xxxx00000
802_1x
peap username_used P@5sW0rD
exit
apply
exit
18xxy-1xxxx00000
...
##########

View solution in original post

SantM · ‎07-23-2020

Hi Peter,

I don’t think that is possible. 802.1X authentication seems to be completely dependent on XCA/XCC. I had long discussion with GTAC and SE on it. I hope that I am wrong at it. 🙂

Even in distributed mode, 802.1X seems to be dependent on XCA. As far as I remember, if we look configuration on wing APs in distributed mode, AP will have IP address of XCA as radius server, not the IP addresses of radius servers, we configure on XCA.

BR;

Santosh

Extreme Networks

EAP Authentication of AP 3XX 4XX 5XX connected to XCA XCC

EAP Authentication of AP 3XX 4XX 5XX connected to XCA XCC