Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

How to create multiple SSID's to connect different domains?

This thread has been viewed 2 times

  • 1.  How to create multiple SSID's to connect different domains?

    Posted Jun 16, 2015 05:28 AM

    We have multiple domains in our network (due to multiple businesses merging networks) and want to know how to create multiple SSIDs that reflect these or add multiple domains to a single SSID. This is so we can get client laptops that are registered to different domains to see the different domains and auto authenticate.

    Has anyone set this up this way before? Appreciate any feedback/help offered.

    We are running AP93 devices connected to a 7220 controller.



  • 2.  RE: How to create multiple SSID's to connect different domains?

    EMPLOYEE
    Posted Jun 16, 2015 06:19 AM
    What RADIUS server are you using?


    Thanks,
    Tim


  • 3.  RE: How to create multiple SSID's to connect different domains?

    Posted Jun 16, 2015 07:11 AM

    Hi Tim, We're running a Windows NPS for Radius. Thanks Steve



  • 4.  RE: How to create multiple SSID's to connect different domains?
    Best Answer

    EMPLOYEE
    Posted Jun 16, 2015 07:25 AM

    If all of the domains are trusted, you should be able to use a single NPS server. See below.

     

    For multiple-domain environments, an NPS server can authenticate credentials for user accounts in the domain of which it is a member and for all domains that trust the local domain of the NPS server. To allow the NPS server to read the dial-in properties of user accounts during the authorization process, you must add the computer account of the NPS server to the RAS and NPS servers group for each domain.

    From: https://technet.microsoft.com/en-us/library/dd197604%28v=ws.10%29.aspx

     

    You can also define multiple NPS servers in your RADIUS server-group and allow fail-through.

     

    http://www.arubanetworks.com/techdocs/ArubaOS_64x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/AAA_Servers/Server_Groups.htm



  • 5.  RE: How to create multiple SSID's to connect different domains?

    Posted Jun 16, 2015 07:43 AM

    Great, thank you