Everything Instant On

  • 1.  802.1x Radius setup

    Posted 10-07-2019 05:17 PM
    Hi everyone, I´m trying to setup a network with 802.1x, everything fine with one AP, put the AP ip address in the NPS configuration and it worked flawlessly. Now I need to plan a deployment with 12 APs, which IP address shall I use? the user guide says: "NAS IP address—Enter an arbitrary IP address to be used as RADIUS attribute 4, NAS IP Address, without changing source IP Address in the IP header of the RADIUS packet." What is "arbitrary" in this case? any of the APs IP adresses? what it that AP is down? Should I use an address not used in the same segment? the latter is like the IP address we set to Instant´s VC Thanks for your comments


  • 2.  RE: 802.1x Radius setup

    Employee
    Posted 10-07-2019 05:39 PM

    @wintechie_io  The arbitrary would be an IP address that you would use across all AP's to communicate with the Radius server like an Instant VC.



  • 3.  RE: 802.1x Radius setup

    Posted 10-09-2019 03:42 PM
    When the AP connects to the Radius will show it´s IP address but it won´t match with that "arbitrary" IP, how would the Radius accept the credential exchange not having matched the source IP? just using the shared secret? When using Instant you set the VC IP and put this IP as a Radius client, they match How does it work in Instant On setup?


  • 4.  RE: 802.1x Radius setup

    Posted 10-07-2019 05:40 PM
    I suppose you have to configure your Radius server somehow to allow any client on the subnet and use some sort of username/password for security / authentication. What kind of radius server exacly are you using? MS or maybe the C-word again?


  • 5.  RE: 802.1x Radius setup

    Employee
    Posted 10-12-2019 10:39 PM

    I need to indicate a correction here. Right now, we need to configure the RADIUS server to allow all APs individually or a rule must allow the entire subnet. But, we are constantly looking to enhance the solution (with software updates) to make it simpler for the user.



  • 6.  RE: 802.1x Radius setup

    Employee
    Posted 03-17-2020 01:02 PM

    With latest SW version, you are able to configure IP address from which RADIUS communication will be initiated - so on you RADIUS server, you just need to add one IP fo whole cluster of APs.



  • 7.  RE: 802.1x Radius setup

    Employee
    Posted 03-17-2020 01:26 PM

    @markov  Yes please take a look at this screenshot.

    NAS.JPG



  • 8.  RE: 802.1x Radius setup

    Posted 05-04-2020 10:11 AM

    I have yet to deploy an Instant On. Does it not have a virtual controller IP like the Aruba Instant? I'll be receiving my test devices this week so I'm curious.