Wired

last person joined: yesterday 

Bring performance and reliability to your network with the Aruba Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of the ArubaOS-Switch and ArubaOS-CX devices, and find ways to improve security across your network to bring together a mobile first solution.
Expand all | Collapse all

Aruba OS - authentication when radius server is down

  • 1.  Aruba OS - authentication when radius server is down

    Posted 17 days ago
    when it comes to authenticating wired eap users when radius server is down, there are two methods in  Aruba documentation:

    1- Critical authentication

    2- cached-reauth authorized

    any one can explain the difference between the two methods? it sees one of them for newly connected users while server is down (critical authentication) and the other is for already authenticated users  when it comes for re-authentication (cached-reauth authorized)

    so if I have no reauthentication configured for eap in switch port:

    1- is there any benefit for "cached-reauth authorized"
    2- what will happen to authenticated users? they'll keep connected and authenticated as long as they keep their connection up?
    3- for new users, is it only "critical authentication" that matters? 

    Thank you,

    ------------------------------
    Ahmad Enaya
    ------------------------------


  • 2.  RE: Aruba OS - authentication when radius server is down

    Posted 17 days ago
    Yes, if you don't have enable reauth on switch port, it is only the critical authentication for this case, the user already connected with be kept the authentication

    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------



  • 3.  RE: Aruba OS - authentication when radius server is down

    Posted 16 days ago
    How about if re-authentication is enabled? is it enough to enable critical authentication? is it still required to enable "cached-reauth authorized" even if proper critical authentication is configured?

    ------------------------------
    Ahmad Enaya
    ------------------------------