Is ExtremeCloud IQ Connect Cloud supported for FortiNAC integration?

Question

Hi everyone,We are currently using ExtremeCloud IQ Connect Cloud to centrally manage our Access Points.Our current environment has the following characteristics:We are using ExtremeCloud IQ Connect Cloud for centralized AP management.	The cloud platform centrally manages the Access Points.	SSIDs and VLANs are configured and managed through the cloud platform.	There is no on-premises Wireless Controller deployed in the environment.	ExtremeCloud IQ Connect Cloud does not provide a dedicated Management IP that can be directly added to FortiNAC as a network device.	We have tested adding an individual AP to FortiNAC using the AP's Management IP. FortiNAC was able to connect to the AP and retrieve information such as the SSID.We would like to clarify the following points:Can ExtremeCloud IQ Connect Cloud be directly integrated with FortiNAC, or is it necessary to add/manage each individual AP in FortiNAC?	If individual APs need to be added to FortiNAC, can FortiNAC control client access based on SSID and VLAN, particularly through RADIUS Authentication/Authorization?	Does ExtremeCloud IQ Connect Cloud support integration with third-party systems or devices through APIs? If anyone has successfully implemented such an API-based integration, we would appreciate it if you could share any relevant documentation or configuration guides for reference.	For anyone who has experience deploying ExtremeCloud IQ Connect Cloud + FortiNAC, particularly in an environment where the APs are fully cloud-managed and there is no on-premises Wireless Controller, what integration approach would you recommend?Any advice, relevant documentation, or real-world deployment experience would be greatly appreciated.

Louisowen2608 · Answer

Since XIQ Connect is the free tier, you don't get direct cloud integration or API access (you'd need a paid Pilot license for APIs). Since there's no on-prem controller, here's the tl;dr on how to handle it:

Adding APs: You'll need to add each AP individually into FortiNAC via SNMP/CLI so FortiNAC recognizes them as RADIUS clients. Direct central integration isn't supported on Connect.

Client Control & RADIUS: This works completely fine. Just point the AAA/RADIUS settings for your SSIDs in XIQ Connect to FortiNAC's IP. FortiNAC will handle 802.1X/MAC auth and dynamically push VLAN attributes back to the AP.

Best Approach: Treat FortiNAC as your central RADIUS server, discover the APs in FortiNAC as individual NAS devices, and let RADIUS do the dynamic VLAN enforcement. No paid API tier required.

Sign up

Login with SSO

Login to the community

Login with SSO