topic 802.1X using EAP TLS in Unleashed

802.1X using EAP TLS

aaron_piazza — Fri, 16 Apr 2021 18:42:19 GMT

RADIUS Client: Ruckus R710 Unleashed

RADUIS server with NPS - Windows Server 2016

When I configure the AAA Servers on unleashed and set TLS to enable the shared secret greys out and is inaccessible.

How can I know the shared secret so I can configure that on the RADUIS server?

Re: 802.1X using EAP TLS

syamantakomer — Mon, 19 Apr 2021 19:44:01 GMT

Hi Aaron,

Could you confirm what it the Unleashed software version.

Re: 802.1X using EAP TLS

pyro_guy — Tue, 20 Apr 2021 05:25:23 GMT

I see the same in my Unleashed,

Ver: 200.9.10.4.212

Re: 802.1X using EAP TLS

aaron_piazza — Fri, 23 Apr 2021 00:37:12 GMT

I figured it out. If you click on the eye symbol it reveals the shared secret. Mine shows radsec as the shared secret.

Re: 802.1X using EAP TLS

aaron_piazza — Fri, 23 Apr 2021 00:47:11 GMT

I have a test network which includes the following:

1. Ruckus R710 Unleashed version 200.9.10.4.233

2. Microsoft Server 2016 configured as a DC, Radius, NPS, CA, DHCP, and DNS.

My goal is to test setting up wireless authentication using 802.1x EAP-TLS.

I have the following devices that need to authenticate:

1. non domain devices (iPads)

2. domain devices (windows 10 pc's)

Does anyone have good information on setting this up?

I was able to configure the PC using EAP without TLS, but when TLS is turned on it won't connect.

Re: 802.1X using EAP TLS

syamantakomer — Fri, 23 Apr 2021 12:50:25 GMT

Hi Aaron,

I hope you have pushed the certificate to end user machines and configured the radius policy correctly.

Here is an article explaining windows NPS policy config for TLS.

https://support.ruckuswireless.com/articles/000002428

Re: 802.1X using EAP TLS

aaron_piazza — Wed, 28 Apr 2021 14:15:51 GMT

Thanks for the document, it is a bit outdated as the last 4 instructions do not match Server 2016, however it explains enough.

Yes I am trying to figure out if I did the cert part correct or not. That may be the issue. I am researching how to create a cert with 2016 and issue via Group policy (or for the ipads via JamF MDM).

Re: 802.1X using EAP TLS

syamantakomer — Wed, 28 Apr 2021 14:26:44 GMT

Hi Aaron,

Its bit difficult to maintain 3rd party vendor product's manual and features updated but we do update time to time.

Thanks for notifying, we will check and get it updated.