XIQ - How can I enable wired 802.1x port authentication

[StephanH]

Hello,

how can I enable wired 802.1x authentication for an XIQ AP so that the AP authenticate on a switch port?

[reinhardg]

Please have a look onto this topic:

[StephanH]

Hello Sam.

yes that’s correct. But as I mentioned above we are used to configuring the AP with the suiteable cred.

On Identifi Wireless for example we have to add username and password for PEAP or if we use EAP-TLS we have to add a certificate to the AP. 

In the mention scenario the XIQ AP is the supplicant, the switch is the authenticator and the third part is a radius server (for example a Microsoft NPS, A3 or Extreme Control).

If there is no config necessary on the XIQ AP, how does the AP determain if he has to use PEAP or EAP-TLS and where can we configure username and password for PEAP?

Here is a link to the corresponding configuration on Identifi:

https://documentation.extremenetworks.com/Wireless/UG/Wireless/User_Guide/t_setting_up_802_1x_authen...

[SamPirok]

Hey guys, I ran this past our XIQ support team and they confirmed you don’t need any settings on the AP for this, it would all be set up on the switch ports. Just to make sure I’m understanding correctly, we’re talking about setting up port authentication on the switch port that the AP is plugging in to, correct? 

[StephanH]

Oops wrong button. The question has not been answered yet.

[CWurm]

Probably that needs to be set through a supplemental CLI command 🙂 Maybe someone of Extreme (or former Aerohive) could help with pointing us in the right direction.

I would be surprised if the XIQ APs could not do that on their ethernet ports...

Kind regards

Christian