10-20-2020 07:22 PM
I’ve search but haven’t found an article of how to implement Google domain device or user 802.1x radius authentication with ExtremeCloud IQ. Is there anyone that could point me in the right direction on how to do this properly?
Solved! Go to Solution.
10-22-2020 03:39 PM
Unfortunately, Google doesn’t allow or supply any Hostname or IP info for external Radius connections. However, other manufacturers allow SAML and Google Authentication services natively; might be a worthy addition
I did find this from Google, so since we can’t connect through IQ we would need to go this route:
“Chrome devices support 802.1x authentication via certificates that are installed for each user on the device. Device-level 802.1x certificates are not supported. You need to be on the network to download the certificate for each user. Therefore, you should set up an open WPA/WPA2-PSK network, or use USB-to-Ethernet adapters to load the certificates on the device.”
Thanks Sam for your quick reponse and I’m happy to see that you’re back
01-21-2021 03:00 PM
Hi Jnesci, thank you for letting me know, we had to update all the article links a couple weeks ago when we activated a new knowledge base system, looks like some of the links got a bit mismatched. Here is the correct link, option 2 reviews the set up when using an external user database (AD): https://extremeportal.force.com/ExtrArticleDetail?an=000080075&q=802.1x%20xiq
01-21-2021 02:27 PM
Sam,
The link you provided is for email notifications in Hivemanager, nothing to do with Radius authentication. Can you repost your liink?
10-22-2020 03:39 PM
Unfortunately, Google doesn’t allow or supply any Hostname or IP info for external Radius connections. However, other manufacturers allow SAML and Google Authentication services natively; might be a worthy addition
I did find this from Google, so since we can’t connect through IQ we would need to go this route:
“Chrome devices support 802.1x authentication via certificates that are installed for each user on the device. Device-level 802.1x certificates are not supported. You need to be on the network to download the certificate for each user. Therefore, you should set up an open WPA/WPA2-PSK network, or use USB-to-Ethernet adapters to load the certificates on the device.”
Thanks Sam for your quick reponse and I’m happy to see that you’re back
10-21-2020 04:00 PM
I’m not personally familiar with Google domain devices but if you’re using Google as your AD, this guide should walk you through how to set up 802.1x using an external AD source: https://extremeportal.force.com/ExtrArticleDetail?an=000080075&q=802.1x%20xiq