Wireless Access

We have setup an older HP MSM 466 Wireless Access Point (version 6.0.3.30) in Autonomous mode and trying to configure a connection to a Radius Server for Authentication.  

Currently there is no one on the office to try and test anything out.  This wireless A.P. is in a remote office where we have a Network communication working.  I can use the command line to login into the Access Point.  My question is who can I test a Radius connection from the AP to see if the Communcation to the Radius Server (in another office) will work?  We are just testing a proof of concept.

I know that the Radius Server can ping the Access point.  The Access point can ping the Radius Server's IP address.   Are there any test communication commands that I can run on the HP MSM 466 to verify it can establish communication with a radius server?

------------------------------
Stavros K
------------------------------

I just found this: https://www.arubanetworks.com/techdocs/ArubaOS_6_5_3_X_Web_Help/Content/ArubaFrameStyles/1CommandList/aaa_test_server.htm

Hopefully this will help

------------------------------
Stavros K
------------------------------

MSM APs are completely different from Aruba APs. Also note that MSM 466  have been end of support for some time now.

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------

Original Message:
Sent: Oct 03, 2024 12:33 PM
From: StavrosK
Subject: How to test a Radius connection from HP MSM 466 command line

I just found this: https://www.arubanetworks.com/techdocs/ArubaOS_6_5_3_X_Web_Help/Content/ArubaFrameStyles/1CommandList/aaa_test_server.htm

Hopefully this will help

------------------------------
Stavros K
------------------------------

Hello @StavrosK

This is the only online MSM AP CLI guide I could find. It is for a bit later version but probably most of the commands are the same

https://support.hpe.com/hpesc/public/docDisplay?docId=c04917086&docLocale=en_US

as far as I remember the MSM APs or controllers didn't have any AAA test tool like the Aruba controllers have. I also cannot see such an option in the CLI guide.

If you cannot connect wireless clients to an SSID which enforces 802.1x authentication, maybe the only option to test RADIUS communication would be to enable RADIUS authentication for admin users. Then you can try to connect via SSH or HTTPs to the management interface of the AP using an account which is not locally defined but authenticated via RADIUS.  If this is working then it should mean that RADIUS communication with the remote RADIUS is working.

Of course you should make sure to not disable local authentication otherwise you can lockout yourself from the AP if the remote authentication is not working.

I think this should be these commands

admin radius authentication

admin radius authentication server <name>

And make sure that this line is not removed.

admin local authentication

As it was already mentioned the MSM product line is end of support.

BTW don't you have https access to the AP? The webUI is more intuitive for configuration. Or do you have TLS issues when trying to access the webUI?

I remember some older versions were using SSLv3 and the connection was not possible.