- Community Home
- >
- Networking
- >
- IMC
- >
- Re: IMC 7.2 , 802.1X WLAN - ISSUES CLIENT RECEIVE ...
-
- Forums
-
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
- HPE Blog, Austria, Germany & Switzerland
- Blog HPE, France
- HPE Blog, Italy
- HPE Blog, Japan
- HPE Blog, Middle East
- HPE Blog, Russia
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
-
Blogs
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Blog, Latin America
- HPE Blog, Middle East
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
-
Information
- Community
- Welcome
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Tips and Tricks
- Resources
- Announcements
- Email us
- Feedback
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Aruba Airheads Community
- Enterprise.nxt
- HPE Dev Community
- Cloud28+ Community
- Marketplace
-
Forums
-
Blogs
-
Information
-
English
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
03-20-2018 07:13 AM - edited 03-20-2018 07:33 AM
03-20-2018 07:13 AM - edited 03-20-2018 07:33 AM
IMC 7.2 , 802.1X WLAN - ISSUES CLIENT RECEIVE DEPLOY VLAN IP ACCESS SERVICE
Hi all, I would like a help regarding UAM with WLAN 802.1x, my environment I have a controller LSU3WCMD0, and Access points MSM460-AM, I created two environments, one with authentication via MAC through BYODAnonymous that worked perfectly without any problem, in the another environment that would be the authentication via RADIUS in the IMC I encountered difficulties, since the User tries to connect but does not receive the IP of the VLAN that is defined in ACCESS POLICE, well I performed the steps:
1. Import ROOT and SERVER Certificates: OK
2. Import AD User through synchronization: OK
3. Configure on LSU3WCMD0, RADIUS, and DOMAIN: OK
4. Set WLAN-ESS on the controller and apply in an SSID template: ok
5. Test with the user connecting: The signal authenticates the user, it appears in the IMC as ONLINE but does not receive the vlan IP.
Could someone help me in this situation?
Thank you.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
03-20-2018 05:17 PM
03-20-2018 05:17 PM
Re: IMC 7.2 , 802.1X WLAN - ISSUES CLIENT RECEIVE DEPLOY VLAN IP ACCESS SERVICE
In 7.2 you'll need to specify the propietary radius attributes for send to the APs to set the deployed vlans. In 7.3 it looks like they support this natively for the MSM as my policies show no propietary atrributes set with policies but its still working.
If you are using your controller to do authentication only and not tunneling the traffic back to the controller, then you are sending the traffic from the AP to the switch where the AP is attached.
You will have set the VLANs used on the AP and the switch already. But you need the radius response to include the vlans to be set for access
To get the traffic to egress the switch that the AP is connected to you will need to have your radius server send the attribute HP-Egress-VLAN-Name(65) along with the matching VLAN name as part of the Access accept response back to the AP. You will need to add a 1 in front of the name for tagged or 2 for untagged - 1MYVLAN
Or you can use HP-Egress-VLANID(64) <tagged/untagged(0x31 or 0x32)>000<VLAN_ID (as hex)>
Name is a little friendlier - you can search HP-Egress-VLAN for more details
this post has some more background
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
03-21-2018 04:53 AM
03-21-2018 04:53 AM
Re: IMC 7.2 , 802.1X WLAN - ISSUES CLIENT RECEIVE DEPLOY VLAN IP ACCESS SERVICE
Thank you for answering Neir, I'll check .... I've already clarified a lot.
Hewlett Packard Enterprise International
- Communities
- HPE Blogs and Forum
© Copyright 2021 Hewlett Packard Enterprise Development LP