Wired Intelligent Edge (Campus Switching and Routing)

Reply
Highlighted
New Contributor

802.1x Auth on Switch-Port with Access-Points

Hello,

I have a customer with 2530 Switches and MSM430 Access-Points- We are using 802.1x with EAP-TLS, PEAP and MAC Authentication.

The APs do not tunnel the client traffic to the wifi controller.

I have configured the APs to authenticate over PEAP what is working fine.

But clients are connected to wife on a access-point do not get a network connection because of the local breakout to the network.

 

Device Profiles are not working with MSM Access-Points. How can I do authentication the Switch-Ports with a connected access-point?

 

This is the Port-Config 

aaa port-access authenticator 1
aaa port-access authenticator 1 client-limit 1
aaa port-access supplicant 1
aaa port-access mac-based 1
aaa port-access mac-based 1 unauth-vid 6

 

THANKS


Accepted Solutions
Highlighted
New Contributor

Re: 802.1x Auth on Switch-Port with Access-Points

It works when I remove MAC-Auth on the Ports where an AP is connected.

 

View solution in original post


All Replies
Highlighted
MVP Guru Elite

Re: 802.1x Auth on Switch-Port with Access-Points

You need to push device mode



PowerArubaSW: Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP... More info

PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...) More info

PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)

PowerArubaIAP: Powershell Module to use Aruba Instant AP

PowerArubaMC: Powershell Module to use Mobility Controller / Master


ACMP 6.4 / ACMX #107 / ACCP 6.5 / ACSP
Highlighted
New Contributor

Re: 802.1x Auth on Switch-Port with Access-Points

Can you please give me little more support?

Highlighted
New Contributor

Re: 802.1x Auth on Switch-Port with Access-Points

It works when I remove MAC-Auth on the Ports where an AP is connected.

 

View solution in original post

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: