In this knowledgebase article I will show you how to set up WPA2 Enterprise authentication for Wi-Fi clients on Digi DAL devices and Aruba ClearPass server as Network Access Device (NAD). In this scenario as a authentication source will be used Windows 2019 server with Active Directory.
To configure AD as an authentication source click Configuration > Authentication > Sources and click Add to create a new authentication source.
Fill out the DC hostname, bind DN and password, base DN and any other settings you require and click Save.
Here we use LDAP over SSL connection on TCP 636 port for communication with AD.
It’s time to create a service, which is a means of grouping all of the policy components that serve a specific type of request into a single configuration set.
Click Configuration > Service and click Add to create a new service.
On the Service tab, select the 802.1X Wireless – Identity Only option from the Service Type dropdown menu.
Enter the name of the Service and click Next.
On the Authentication tab, in the Authentication Sources field select the name of the created above Active Directory Source.
In the Authentication Methods field leave only EAP PEAP method and click Save.
You will see a new service in the service list.
Next, we need to add your WLAN access point or controller as a network device on the Aruba ClearPass server. In this example, I am using another Digi device—the EX50 as the access point.
Click Configuration > Network>Devices and click Add to create a new device.
Now we can proceed with configuring the Digi EZ4 as a Wi‑Fi client.
Navigate to Configuration > Wi‑Fi > Client Mode Connections, enter a name for the connection, and click the plus icon.
Under the SSID list, click Add SSID and provide the SSID name. Select PEAP as the EAP protocol, choose WPA2‑Enterprise as the encryption method, and enter the credentials for the Active Directory user.
Verification Testing
When Digi connects to the Wi-Fi you will see a successful entry in the syslog under the Monitoring>Access Tracker menu
On the Digi GUI under the Status>Connections>Wi-Fi>Clients you will see an active connection record.
Last updated:
Mar 02, 2026