EAP Authentication of AP 3XX 4XX 5XX connected to XCA XCC

[PeterK]

Hi,

currently it’s not possible to push a 802.1X Config to APs from XCA / XCC as it works on identifi for years.

Is it possible to do a EAP-PEAP or EAP-TLS Config (maybe via cli/ssh/scp) on Wing 7 APs, when running centalized mode?

[Miguel-Angel_RO]

Hi Peter,

The option is now available on XCC 5.16.01 as option Site/DeviceGroup/Profile/ADVANCED:

Regards

Mig

[PeterK]

Thanks, for all your Information.

It works.

You can send PEAP credential via AP-CLI oder via XCA-CLI to the AP.

I makes no difference if its a native identifi ap or a wing7 ap in centralized mode.

[Miguel-Angel_RO · Accepted solution]

Hi Peter,

I used this CLI code to enable the 802.1X PEAP per AP.

Playing with excel you can generate a lot of configs easily based on a list of serials.

As a reminder the 802.1x config in Identify is to be done per AP, so I always did that via CLI to configure it and certainly on big installations (1000+ APs).

As Tomasz mention it, it is a part of a bigger CLI config where I also fix the channels and the output power.

• ##########
• ap
• 18xxy-1xxxx00000
• 802_1x
• peap username_used P@5sW0rD
• exit
• apply
• exit
• 18xxy-1xxxx00000
• ...
• ##########

[Tomasz]

Peter, Ron,

“WiNG 7 AP” 3xx/4xx/5xx could rather be referred as “Dual-Mode APs”. In centralized mode it is simply IdentiFi-loaded box. Whatever you want to do on that and it’s not available in XCA/XCC GUI, you have to deep dive in IdentiFi CLI and give a try… I don’t have one by my side right now but from some old dump I see you may want to check ‘cset peapPassword’ and ‘cset peapUsername’, hoping it’s the same since 37XXs. Then capply, csave and a reboot for good health. I’ll be able to play around somewhere next week, finally getting some fresh lab equipment (and a new slim tiny server to assemble, yaay).

Personally I’m stubbornly waiting for new GUI of WiNG (hoping they gonna get inspired by XIQ), as feature set and configuration scheme impresses me at most, once I gave it a chance after years on IdentiFi. IMHO XIQ look & feel is awesome, amount of troubleshooting tools as well (on WiNG collecting station-related events from entire site is good, OTOH on XIQ APs even LDAP test is available, and spectrum analysis is so much better). I hope to see a platform that takes all good from both…

Hope that helps,

Tomasz

P.S. CLI is cool for assigning static channels on many APs at once by pasting a ready-to-go code into Putty. 😛