Wired Intelligent Edge

last person joined: yesterday 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

802.1x Authentication for Multi-domain on Aruba 2930M switch

This thread has been viewed 5 times

  • 1.  802.1x Authentication for Multi-domain on Aruba 2930M switch

    Posted Jun 14, 2018 11:29 AM

    Hi...

     

    We have implemented .1x authentication for single domain on interface/port. it is working fine but we are looking for .1x authentication for Multi domain.

     

    Example for single domain authentication..

     

    aaa authentication port-access eap-radius authorized

    aaa port-access authenticator 1/25 auth-vid 33
    aaa port-access authenticator 1/25 unauth-vid 63
    aaa port-access authenticator 1/25 client-limit 5

    aaa port-access authenticator active 

     

     

    Could you please share the commamds for multi domain authentiaction.

     

    Ping me on sandeep.dj@systemtech.biz



  • 2.  RE: 802.1x Authentication for Multi-domain on Aruba 2930M switch

    EMPLOYEE
    Posted Jun 14, 2018 11:56 AM
    Did you follow the ClearPass Solution Guide for Wired Policy Enforcement?


  • 3.  RE: 802.1x Authentication for Multi-domain on Aruba 2930M switch

    Posted Jun 14, 2018 12:08 PM

    No.But we are using extrenal radius server. 

    Ok anyway i'll go through that guide and get back to you..

     

    Thanks for your reply 



  • 4.  RE: 802.1x Authentication for Multi-domain on Aruba 2930M switch

    EMPLOYEE
    Posted Jun 14, 2018 02:42 PM

    Hi

     

    If you mean by multidomain using different @domain and @domain2 within the authentication then that needs to be configured on the RADIUS side. Are you using ClearPass?

    As Tim already suggested take a look at Tim's great guide!

     

     



  • 5.  RE: 802.1x Authentication for Multi-domain on Aruba 2930M switch

    Posted Jun 15, 2018 01:36 AM

    Can't we achive this @domain1 and @domain2 senario without Clearpass. 

     

    We are using External Radius server. Can i configure the user profile on radius server.



  • 6.  RE: 802.1x Authentication for Multi-domain on Aruba 2930M switch

    EMPLOYEE
    Posted Jun 15, 2018 02:11 AM
    Hi

    That’s depending on your radius server not the switch.
    Which are you using?


  • 7.  RE: 802.1x Authentication for Multi-domain on Aruba 2930M switch

    Posted Jun 15, 2018 07:44 AM

    Hi,

    Radius is at Windows server 2012 R2.

     

    Apoorv.



  • 8.  RE: 802.1x Authentication for Multi-domain on Aruba 2930M switch

    EMPLOYEE
    Posted Jun 15, 2018 09:45 AM

    Hi,

     

    Setting up multidomain on NPS is maybe off topic here.

     

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/30715f28-26d0-43a8-840e-ef78cf54eaad/npsradius-authentication-from-mulitple-domains?forum=winserverNAP

     

    hope it helps.