Wireless Access

Reply
New Contributor

802.1x with internal db and Radius server in server group

We have setup dot 1x authentication using windows radius server. We also want to add internal db in the server group so users which are on internal db can also be authenticated using dot1x. Is it possible? We already enabled termination on aruba controller and clients are authenticate using Radius server.

 

We need an same ssid which can authenticate users both on Radius server and user on internal db.

 

Note : We already applied server certificate in controller.

Guru Elite

Re: 802.1x with internal db and Radius server in server group

You would also need to enable "Fail through" on the server group.  Make sure termination and 802.1x already works before adding the internal database.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
New Contributor

Re: 802.1x with internal db and Radius server in server group

Enabled "Fail through" on the server group, now both radius and Internal DB authentication is working. But we have another issue now for creating users with guest role in internal DB it is accessible by all ssid. It should work only in guest ssid alone. Is it possible to do this.

Guru Elite

Re: 802.1x with internal db and Radius server in server group

It is not possible to separate this, no.  


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Guru Elite

Re: 802.1x with internal db and Radius server in server group

You should consider using an external RADIUS server.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: