802.1x authentication

  • 2
  • Question
  • Updated 4 years ago
  • Answered
I want to set up .1x authentication on my Aerohive network, using an external radius server and was wondering if I need to set a static address on all of my APs and add each one of them as an authentication client on my radius server.

Any reference materials on this setup would be great.

Regards,
dak
Photo of Daniel Kline

Daniel Kline

  • 2 Posts
  • 0 Reply Likes

Posted 4 years ago

  • 2
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
You certainly do not need to set static IPs for each of your APs. Actually, I would not recommend doing that. Rather, I would suggest using DHCP with reservations for each of your APs so that they get a consistent address.

You can typically configure a RADIUS server to accept a range of addresses for RADIUS clients, or you can specify RADIUS clients individually. The choice is yours.
Photo of Daniel Kline

Daniel Kline

  • 2 Posts
  • 0 Reply Likes
Thank you, Nick.  I think the dhcp reservations will work for the AP address assignment.  And I will have to check to see if we can configure our radius server to accept a range of addresses.

Regards,
dak
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
If you can, use a dedicated broadcast domain (VLAN) for your APs too.