05-09-2012 12:17 PM
How do you setup a IAP with WPA2 Enteprise using PEAP? I am familiar with creating a CSR in a controller and creating a cert and all that jazz but have not done it on an IAP yet.
This documents i found applies to EAP-TLS:
Or is it not worth the hassle trying to setup an IAP with WPA2 Enteprise using PEAP? and just go with EAP-TLS by following the previously linked document?
05-09-2012 12:26 PM
Protected EAP (PEAP) is an 802.1X authentication method that uses server-side public key certificates to authenticate clients with server.
You can upload a server certificate on Instant as shown in the attached screen shot.
05-09-2012 01:43 PM
No. You can use an external RADIUS server and just specify the RADIUS server's IP in IAP.
I though you were trying to use IAP's internal RADIUS server to authenticate and if so you will need a cert installed.
Does this answer your question?
05-10-2012 05:56 AM
Sorry, i misunderstood the capabilites of the Aruba IAP, didn't know you can use the internal RADIUS server built-in to the virtual controller or external Radius. I thought the only way to use PEAP-MsChapv2 or EAP-TLS was to use the internal RADIUS server, which now i understand you would need to load a certificate into the virtual controller to do so.
Knowing that, it seems like it would be easier to just use the external RADIUS server rather than go through the headache of creating a cert and loading it in the IAP? or am i wrong?