Comprehensive guides on implementing 802.1X authentication for enterprise Wi-Fi. Learn about RADIUS servers, EAP methods, and WPA-Enterprise security.
32 articles tagged with 802.1X Authentication
Districts run some of the most attacked WiFi anywhere on a single shared password. What CIPA actually requires from the network, and how Chromebook fleets move to certificate-based 802.1X.
Read articleQuantum computers will eventually break the RSA and ECC behind EAP-TLS and RADIUS, and NIST's 2030/2035 deadlines are published. Which parts of your WiFi stack are exposed to harvest-now-decrypt-later, and how to build crypto-agility now.
Read articleWPA2-Enterprise has quietly become the legacy option. What changes at the radio layer, where transition mode bites, what 6 GHz and Wi-Fi 7 require, and how to sequence the migration without stranding a single client.
Read articlePCI DSS 4.0.1 is fully enforced, and its wireless requirements reach every store, hotel, and restaurant - even where payments never touch WiFi. Quarterly rogue AP scans, guest network segmentation, vendor defaults, key rotation, and 802.1X explained.
Read articleThe rules changed in 2026: no sponsor requirement, a SOC 2-based entry class, and a progressive path upward. The current map of FedRAMP classes, DFARS 7012, CMMC, and impact levels.
Read articleOne SSID, thousands of campuses, and a password that never leaves home. How eduroam's federated RADIUS hierarchy authenticates roaming users against their home institution, what joining requires, and why logins are moving to EAP-TLS certificates.
Read articleThe Department of War paused CMMC's third-party certification rollout in July 2026 - but DFARS clauses and NIST SP 800-171 never paused. What defense contractor wireless networks still have to do, and why the pause is the best window to fix WiFi authentication.
Read articleBlastRADIUS showed that RADIUS/UDP fails against a modern attacker, and the IETF is deprecating cleartext transport. What RadSec changes, where it is already mandatory, and how to migrate.
Read article802.1X proves who you are. It doesn't decide whether that identity, on that device, in that context, should be on the network at all. That's the job conditional access does — and on wireless, the decision happens at the RADIUS layer. Here's how policy-based access control works, what it can evaluate, and how to roll it out without locking anyone out.
Read articleMicrosoft Entra ID is an identity provider, not a RADIUS server. Cloud RADIUS, Intune SCEP, and EAP-TLS replace on-prem Active Directory and NPS so WiFi users authenticate against Entra without a domain controller in sight. Here are the three Microsoft-native paths compared, why most orgs land on certificate-based 802.1X, and what a working deployment looks like end to end.
Read articleEvery organization has a network. Every network is an identity security boundary. Network Identity Security is how you enforce it — replacing WiFi passwords with certificates, wiring every person, device, and AI agent into one zero-trust fabric, and catching anomalies before the session even completes.
Read articleCredentials are now the perimeter — and attackers know it. ITDR is the category built to catch identity abuse that endpoint and network tools miss. Here's what WiFi ITDR is, why RADIUS and captive portals need their own detection layer, and how the threat model maps to MITRE ATT&CK.
Read articleNetwork access control can't see individual AI agents, but it can make sure the machines they run on prove who they are before they connect. Here is the honest scope.
Read articleYour access points already have built-in resilience features that most organizations never configure. This guide covers session timeouts, PMK caching, 802.11r, and vendor-specific failover settings for Meraki, Aruba, Ruckus, UniFi, Cisco WLC, and Juniper Mist — so your WiFi keeps working even when the RADIUS server is briefly unreachable.
Read articleLearn how to configure WPA2-Enterprise 802.1X authentication on Cambium Networks access points using IronWiFi Cloud RADIUS and the cnMaestro cloud controller. This guide covers RADIUS server setup, WLAN profile configuration, AP group deployment, and troubleshooting.
Read articleLearn how to configure WPA2-Enterprise 802.1X authentication on Fortinet FortiGate and FortiAP using IronWiFi Cloud RADIUS. This guide covers RADIUS server configuration, SSID setup, firewall policies, dynamic VLAN assignment, and troubleshooting common issues.
Read articleLearn how to configure WPA2-Enterprise 802.1X authentication on CommScope Ruckus wireless controllers using IronWiFi Cloud RADIUS. This guide covers SmartZone, ZoneDirector, and Unleashed platforms with step-by-step RADIUS server setup, WLAN configuration, and troubleshooting.
Read articleA detailed walkthrough of configuring WPA-Enterprise authentication on Aruba access points using Cloud RADIUS. Covers Aruba Instant, Aruba Central, certificate-based authentication, server certificate validation, role-based access policies, and troubleshooting.
Read articleLearn how to configure WPA2-Enterprise 802.1X authentication on Cisco Meraki access points using IronWiFi Cloud RADIUS. This step-by-step guide covers RADIUS server setup, SSID configuration, dynamic VLAN assignment, and troubleshooting common issues.
Read articleA practical, step-by-step guide to configuring WPA-Enterprise authentication on Ubiquiti UniFi access points using a Cloud RADIUS server. Covers RADIUS profiles, SSID setup, dynamic VLAN assignment, and troubleshooting common issues.
Read articleRADIUS is the backbone of network access control, handling billions of authentication requests every day. Whether you manage WiFi, VPN, or wired networks, understanding RADIUS is essential. This guide covers everything from protocol fundamentals to choosing the right RADIUS solution for your organization.
Read articleMost businesses still use a shared WiFi password for network access. That single password is one of the biggest security gaps in your organization. Here's why WPA2-Enterprise with individual credentials is the standard your business should meet -- and how the migration is easier than you think.
Read articleChoosing the right EAP method determines whether your enterprise Wi-Fi is genuinely secure or just appears to be. Here's a definitive comparison of every EAP method that matters in 2026, with concrete guidance on which to deploy.
Read articleOn-premise RADIUS servers served their purpose for two decades. But in 2026, managing your own FreeRADIUS, NPS, or ISE infrastructure is overhead that delivers no competitive advantage. Here's what you gain by moving RADIUS to the cloud.
Read articleManaging enterprise wireless from the cloud has become the default architecture for organizations of every size. This guide compares the leading cloud WiFi management platforms, explains how the technology works, and shows how cloud RADIUS and captive portals fit into the picture.
Read articleHotspot 2.0 eliminates captive portals and delivers automatic, encrypted Wi-Fi connections on public networks. This guide covers the top solutions, hardware requirements, and a step-by-step implementation path from 802.11u configuration to OpenRoaming federation.
Read articleYour shared Wi-Fi password is your network's weakest link. Here's a battle-tested, phased approach to migrating enterprise wireless from PSK to 802.1X without bringing the building to a standstill.
Read articleIoT devices are flooding enterprise networks but most lack basic security features. Learn how to use network segmentation, RADIUS-driven policies, and device profiling to contain the risk without blocking the innovation.
Read articleThe traditional"castle and moat" security model assumes that devices inside your network are trustworthy. Zero Trust flips this assumption entirely. Here's how to implement Zero Trust principles for your enterprise Wi-Fi infrastructure.
Read articleShared Wi-Fi passwords are a relic of a simpler time. In today's threat landscape with high-speed Wi-Fi 6 and converged 5G networks, certificate-based authentication isn't just better security - it's the foundation of zero-trust wireless access.
Read article