We are using freeradius and it works very well. It's linux and CLI based though so would recommend having a good solid base of those skills in the team that's supporting it. It's been reliable and flexible.
Another +1 for Cloudpath onboarding, we've been on XC for quite some time and are currently moving to ES. We won't be using their internal radius at this point but will look into it later. We mainly use PEAP for auth but have introduced EAP-TLS with Cloudpath, it's gone well and we expect to be going live with that soon We don't run wired dot1x but did get a pilot up and running about 18 months ago with Cisco 3750 series switches. We had it all up and running with Windows, Apple & Linux devices able to auth. Over time we noticed some issues but with no project to head down this path it was all "spare time" work. As such it got dropped, we don't know where the issues were but the initial setup was easy so we are confident it would all be good providing we have the time to implement properly. -- Jason Cook The University of Adelaide, AUSTRALIA 5005 Ph : +61 8 8313 4800 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Danny Eaton Sent: Thursday, 25 June 2015 5:56 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Network Authentication question Is anyone doing any of these for wired, using 802.1X? From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John Kaftan Sent: Wednesday, June 24, 2015 3:22 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Network Authentication question I went with the Extreme Netsight product at my last shop and found it to be excellent. I could assign policy to an end user pretty much on any criteria I could think of. I was hard pressed to find something I could not do. The nice thing about Extreme is that it is a fully integrated system across wired and wireless and you can apply the exact same policy to a user no matter how or where they connect. Naturally it works best if you have Extreme for both wired and wireless but it is not necessary. John From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Barber, Matt Sent: Wednesday, June 24, 2015 1:46 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [BULK] Re: [WIRELESS-LAN] Network Authentication question Importance: Low Hi Matthew, We are currently deploying a new Aruba network with ClearPass after evaluating both them and Extreme pretty heavily. ClearPass was one of the major deciding factors in us ending up with Aruba. As Frank and Russ mentioned, it is very full-featured. We are using the RADIUS functionality for our main WPA2-Enterprise network and using their guest and registration features for everything else. We are very impressed so far. I would be happy to talk specifics if you are interested. Take care, Matt Barber '06 Network and Systems Manager Morrisville State College 315-684-6053 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Williams, Matthew Sent: Wednesday, June 24, 2015 10:44 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] Network Authentication question We're looking into a few RADIUS solutions and I was wondering if any of you had any experience with the following products and what your thoughts are on them: Cisco ISE Aruba ClearPass Extreme NetSight Cloudpath XPressConnect ES Any input would be appreciated. Thanks. Respectfully, Matthew Williams IT Manager, Wireless Kent State University Office: (330) 672-7246 Mobile: (330) 469-0445 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. !DSPAM:911,558b11734371431181996! ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
