Aerohive with Lightspeed Rocket accounting

  • 1
  • Question
  • Updated 9 months ago
Does anybody successfully integrated Lighstpeed Rocket as accounting for Radius?

I have NPS as radius with Aerohive, but apparently Lightspeed needs to be set as accounting server.

I thought I could add lightspeed as client in NPS but after that I don't see users in lightspeed. 

Accoridng to lightspeed:  As long as the rocket is set to be an accounting server from your RADIUS controller/AP and the shared secret is correct, it should receive information.

Thank You
Photo of MST

MST

  • 152 Posts
  • 3 Reply Likes

Posted 1 year ago

  • 1
Photo of Adam Grieger

Adam Grieger

  • 2 Posts
  • 1 Reply Like
We don't use a Lightspeed Rocket anymore but we successfully had Aerohive passing accounting details to the Rocket. We actually use the same method with a web filter from a different vendor.

The Lightpseed rocket does not need to be set as a client in NPS.

In HiveManager or NG you need to setup new Radius Servers to send only Authentication to NPS and then Accounting to your Rocket. Please see the screenshot of my configuration.

Hope this helps. Happy to try answer any more questions you may have.
Photo of MST

MST

  • 152 Posts
  • 3 Reply Likes
Great !!! I could not figure that out, That helps a lot.  I see you have backup and main authentication. I have NPS as only and main radius authentication. I was thinking about setting backup radius as aerohive access point (radius) - as second one. Still having NPS as main but in case to have backup. I think that would work, and have to play some time in summer when school is over.

But now for lightspeed - thank You so much, that is very helpful info. -Adam
Photo of Adam Grieger

Adam Grieger

  • 2 Posts
  • 1 Reply Like
The primary and backup authentication are actually both NPS in my environment. There are commands to export the configuration and import into the secondary NPS. 
Glad I could help and good luck getting it all setup.
Photo of MST

MST

  • 152 Posts
  • 3 Reply Likes
When i try to save my new config I have the message:

The authentication/accounting server type and shared secret must be set for the RADIUS server to which the RADIUS proxy forwards RADIUS messages.

Any thoughts? I provided to both secret passwords.
(Edited)
Photo of MST

MST

  • 152 Posts
  • 3 Reply Likes
I think I have to create new AAA Client profile and then remove the old one. otherwise I cannot change the current one like I was trying to do. 

Besides that I have Radius Proxy with realms pointing to default, null, and windows AD pointed to the old AAA Client. So I believe I have to change these and point them to new profile. I don't remember why Radius Proxy is set here for Radius NPS. Can I just remove radius proxy from here and do I really need this? 
Photo of MST

MST

  • 152 Posts
  • 3 Reply Likes
was able to successfully integrate it thx
Photo of MST

MST

  • 152 Posts
  • 3 Reply Likes
resolved