Smoothwall Radius with unifi APs and Server 2016

[bodminman]

Hi there,

 

I have been trying for the last few days to get this working with no joy. When I try connecting to the SSID, I'm prompted for a username and password, but when I enter the details, nothing happens for approx 10 seconds until a message appears saying 'Could not connect to 'SSID NAME')

 

We have Unifi Cloud Key and have created a test radius profile etc. The radius profile, the auth server is set to the AD server IP and the accounting has been set to the Smoothwall IP.

 

On the Smoothwall under the BYOD section, I have added the IP of the Unifi controller to the list of Authorised Radius Clients and have a Smoothwall Access ruling in place for the 1812/13 ports.

 

All the shared secrets have been double-checked.

[ThomL]

Do you have the NPS role installed on the AD (guessing a DC?) server so it can handle the radius requests?

 

When I've set this up before I've setup a dedicated NPS server to handle the radius stuff rather than bundle with a DC etc.

[bodminman]

Do you have the NPS role installed on the AD (guessing a DC?) server so it can handle the radius requests?

 

When I've set this up before I've set up a dedicated NPS server to handle the radius stuff rather than bundle with a DC etc.

 

Sorry, yes I should have mentioned that. It to set up to forward the requests to the Smoothwall box.

[Davit2005]

Hi there,

 

I have been trying for the last few days to get this working with no joy. When I try connecting to the SSID, I'm prompted for a username and password, but when I enter the details, nothing happens for approx 10 seconds until a message appears saying 'Could not connect to 'SSID NAME')

 

We have Unifi Cloud Key and have created a test radius profile etc. The radius profile, the auth server is set to the AD server IP and the accounting has been set to the Smoothwall IP.

 

On the Smoothwall under the BYOD section, I have added the IP of the Unifi controller to the list of Authorised Radius Clients and have a Smoothwall Access ruling in place for the 1812/13 ports.

 

All the shared secrets have been double-checked.

 

When using Unifi the IP added to the Radius clients needs to be the individual AP IP addresses. The Unifi Controller is jus a management method for the APs. The only time the controller is involved is if you have captive portal setup on the controller at least as my experience or knowledge is.

 

Other WiFi systems such as the more high end Aruba mobility masters it is a bit different as the APs form a tunnel to the controller and the controller does a lot more work around auth, ALCs, roles, vlan assignment, etc.

Edited August 19, 2022 by Davit2005

[mdrabble]

I have a Windows NPS server with Smoothwall and Unifi APs

 

I use a Linux box to host the controller, so not sure how different it will be but will PM you a PDF guide I created for setting it up.

[buzzard]

Not sure if its still an issue for you but as @Davit2005 said, you need to put each AP in as with unifi each AP is a RADIUS client, although you can put them in as a range rather than individually (best set on a reserved IP address in DHCP)

[mshakespeare]

Hi, would you mind sharing your guide with me? Im currently trying to achieve the same setup.

[mdrabble]

@mshakespeare I've sent you a PM with link to pdf guide.

[JATSO]

I have a Windows NPS server with Smoothwall and Unifi APs

 

I use a Linux box to host the controller, so not sure how different it will be but will PM you a PDF guide I created for setting it up.

 

Wouldn't mind that as well please if you don't mind.

 

TIA

Edited October 12, 2022 by JATSO

[mdrabble]

Wouldn't mind that as well please if you don't mind.

 

TIA

 

@JATSO Sent you a PM

[synaesthesia]

I have a Windows NPS server with Smoothwall and Unifi APs

 

I use a Linux box to host the controller, so not sure how different it will be but will PM you a PDF guide I created for setting it up.

 

Necrothread! Could I possibly have a copy of this guide please?

 

Thanks

[ITB0SS]

Hi could I get the guide too please?

[mdrabble]

Yes will dig it out and post a link on here :-)

[mdrabble]

As requested ink to a PDF for Smoothwall and Unifi using Windows NPS - https://midly.in/6XcJK8

 

We recently moved to Fortigate, so I not able to check anything......

Edited September 16, 2024 by mdrabble
added url using a short url link.....