Salesforce

Configuring a Wireless Access Point (WAP), VPN or Router for JumpCloud's RADIUS

« Go Back
Information
Configuring a Wireless Access Point (WAP), VPN or Router for JumpCloud's RADIUS
This document is meant to be used in conjunction with RADIUS Configuration and Authentication.
 
JumpCloud has updated the RADIUS infrastructure, which required changing IP addresses used for this application. The current list (below) should be used for all RADIUS applications and/or devices. If RADIUS was configured using the legacy IPs listed on this page prior to 9/20/2018, ACTION IS NEEDED to prevent loss of service. Make sure to update any application and/or device using RADIUS with the IPs listed on this page. See Configuring a Cisco Meraki WAP for details specific to that device.

Prerequisites:
  • Device or service endpoint that supports RADIUS and either EAP-TTLS/PAP or EAP-PEAP/MSCHAPv2 authentication methods.  Simple PAP may also be used, but we highly recommend you use a more secure authentication protocol such as EAP-TTLS/PAP or EAP-PEAP/MSCHAPv2
  • Port 1812/UDP to our RADIUS service endpoints (RADIUS Accounting on 1813 is not supported)
  • The JumpCloud RADIUS server certificate (For EAP-TTLS implementations)
  • The Shared Secret from the JumpCloud RADIUS Server configuration

Configuration

The following is general information for setting up RADIUS on a device or service endpoint. Please refer to your vendor's documentation for specific configuration details, or for a specific example, see Configuring a Cisco Meraki WAP to JumpCloud's RADIUS-as-a-Service.

JumpCloud RADIUS server details:

When configuring your application or device, choose the IP(s) closest to your geographic location.
 
18.204.0.31us1.radius.jumpcloud.comUS East
54.203.27.225us2.radius.jumpcloud.comUS West
18.194.159.20eu1.radius.jumpcloud.comEU
18.182.131.248ap1.radius.jumpcloud.comAPAC


Encryption/Authentication Mode:

  • WPA2 Enterprise
  • WPA2 with RADIUS
Note:  "WPA2 with RADIUS" is not available on all WAP and Router devices, and will vary by hardware vendor.  Please refer to your vendor documentation for further information.

Testing the connection:
  • Authenticate using the JumpCloud username and password, or email address and password.
  • Test the authentication directly from the device (If supported)
Tips for Debugging Radius: 
Data Section
configuring-a-wireless-access-point-wap-vpn-or-router-for-jumpclouds-radius1-2019-08-21-10-36-47

Powered by