AP-Aware: automatic device configuration after AP authenticates with PEAP/TLS on switchport

[Volker_Kull]

Uniform function with which all APs (WING,AH) can be authenticated at the switchport via PEAP or TLS and automatically receive the required switchport configuration and remove it when the APs are disconnected. Currently, This is not only to authenticate the AP with 802.1X you have to take care about port configuration, NAC configuration and disable everything after disconnecting the AP.

XCC cannot perform AP authentication with PEAP/TLS (WING7), coudn`t find it in XIQ either, port templates are no available on all switch OS, ACL/OnePolicy is different on switch series,...

It´s a puzzle where the pieces don´t fit togehter…

br

Volker

[AlexN]

Hi Volker,

first of all, as of XCC 5.16 we do support 802.1x supplicant on AP.

what you describe is auto-sense feature that we will have in VOSS 8.3. I agree, that it’s not exactly uniform mechanism across VOSS and EXOS, because every NOS has it’s own mechanisms to implement “AP-Aware” workflow, but they do exist today/will exist in the near future.

With that, 2 questions:

1. Do you agree , that on EXOS we can do it already ? If not - what is missing from switch side ?

2. Are you aware about VOSS 8.3 port auto-sense feature ? If not - see you on the next TechTalks, If yes - is it adequate for your request ?