cancel
Showing results for 
Search instead for 
Did you mean: 

XIQ - How can I enable wired 802.1x port authentication

XIQ - How can I enable wired 802.1x port authentication

StephanH
Valued Contributor III

Hello,

how can I enable wired 802.1x authentication for an XIQ AP so that the AP authenticate on a switch port?

Regards Stephan
1 ACCEPTED SOLUTION

reinhardg
Contributor II

Hello Stephan,

yes, with the GUI of XIQ it is not possible to configure 802.1x.

With the CLI PEAP is the default. MD5, TLS and TTLS is also possible, i.e.: supplicant name_of_supplicant eap-type md5 (https://docs.aerohive.com/330000/docs/help/english/ng/Content/reference/docs/cli-reference-guides.ht...)

I’ve requested an according FR at my sales engineer some months ago, but didn’t get an answer, yet.

Our production env is still under HM Classic. We are testing XIQ so that we can decide whether to migrate or replace all that stuff with HW of a vendor that has better support (or should I say: Support at all?)

View solution in original post

18 REPLIES 18

StephanH
Valued Contributor III

Ok, 

Reinhard. 802.1x with CLI works fine. Thank you for your help.

Regards Stephan

CWurm
Contributor

Thank you very much! I haven’t seen this setting before ? This is very nice to know that you can also bind a supplemental CLI to each AP individually.

Can you combine both settings, i.e. have a supplemental CLI for the whole network policy and also one on the AP or can you only enable supplemental CLI in one place?

 

Kind regards

Christian

 

Edit: nevermind my question. I saw you can set to either combine both supplemental CLIs or use the device-level supplemental CLI setting as an override 🙂

reinhardg
Contributor II

@CWurm With XIQ (on-prem) you can attach a supplemental CLI at network policy level (“Additional Settings” → “Policy Settings” → “Supplemental CLI”) as well as at AP level (“Device Configuration” → “Supplemental CLI”). Is this what you need?

CWurm
Contributor

@reinhardg thank you for your hint! Good to see that it is possible to enable 802.1X via supplemental CLI commands on an AP. I will try this in my test lab in the next few days to verify if that works 🙂

 

However with supplemental CLI we can only push a single credential across all devices which might be sufficient for some customers but not for all. I think I will open up a feature request as well to have this option available in the CLI and to have it customizable for every single AP as well.

 

Kind regards

Christian

GTM-P2G8KFN