802 dot1x authentication using LDAP Server on vSCG

Summary

Does vSCG support 802 dot1x authentication using LDAP Server? Yes, since SZ 3.2 release.

Question

Does vSCG support 802 dot1x authentication using LDAP Server? Yes, since SZ 3.2 release

Customer Environment

vSCG 3.0, LDAP Server

Root Cause

802 dot1x requires a RADIUS server for EAP termination between ZD and the LDAP server. Hence LDAP server cannot be used for 802.1x Authentication. (In customers SZ 3.0 environment)

Workaround

Before SZ 3.2 we cannot use LDAP, but can use Radius Server for 802 dot1x Authentication for vSCG.
This is configurable under "Configuration>>AAA Servers".

Since SZ 3.2, LDAP is now supported for 802.1x.

Resolution

Before version 3.2, vSZ does not support LDAP Server for 802.1x Authentication. We could alternatively use Radius Server as AAA Servers for 802.1x Authentication.

Since SZ 3.2, LDAP is now supported for 802.1x.

User-added image

Note: In LDAP, the User password must be in clear text.

Article Number:
000004349

Updated:
March 29, 2019 02:49 PM (over 5 years ago)

Tags:
Configuration, Security, Troubleshooting, Known Issues and Workarounds, virtual SmartCell Gateway

Votes:
0

This article is:
helpful
not helpful