Router Template

Access port: for a port connected to an individual host

WAN port: for a port connected to the WAN

Trunk port: for a port connected to a forwarding device such as an AP and switch that supports multiple VLANs

Name: Enter a name containing up to 32 characters, including spaces.

Description: Enter an optional description of the port type.

Port Status: Toggle the port status ON to enable the port, or OFF to disable it.

Port Usage: Select Access Port for ports connected to individual hosts, Trunk Port (802.1Q VLAN Tagging) for ports providing network access through forwarding devices such as APs and switches that support multiple VLANs, or WAN Port for a port acting as a backup WAN interface. Then configure parameters for the port type you selected, as describe in the following sections.

No user authentication and no MAC authentication. This is the default and is common for sites where you know all connections will come from trusted devices so no authentication is necessary. An employee home offices is one example.

User authentication for clients with a RADIUS supplicant running on them but no MAC authentication. Use this option to authenticate users before allowing network access, if you know that permitted devices will have a RADIUS supplicant running on them, and if your infrastructure is set up for RADIUS user authentication.

MAC authentication for clients without a RADIUS supplicant but no user authentication. Use this option to control network access when you know that permitted devices connecting to the port will not have a RADIUS supplicant and your RADIUS infrastructure is set up to authenticate them by MAC address.

User authentication for clients with a RADIUS supplicant or MAC authentication for clients without. This option is useful for situations where you cannot know in advance if a device connected to the access port will have a RADIUS supplicant, perhaps when users at different branch sites connect devices with different RADIUS capabilities to the port.

Authentication Protocol: Choose PAP (Password Authentication Protocol), CHAP (Challenge Handshake Authentication Protocol), or MS CHAP V2 (Microsoft CHAP Version 2), depending on which protocol the RADIUS authentication server supports. If you are using an Extreme Networks RADIUS server, use the default choice: PAP. For an external RADIUS authentication server, choose the protocol that it supports. The Extreme Networks device functioning as the RADIUS authenticator uses the chosen protocol to authenticate communications between itself and the RADIUS server when submitting client credentials (MAC address) for authentication.

If you already enabled User Authentication on the Wired Connectivity tab and configured one or more RADIUS server groups for it, those servers will also perform MAC authentication. If you enable only MAC authentication on the access port, then you must define a default RADIUS server group and optionally other groups via classification.

Default User Profile: Set the user profile that you want the router to apply by default to users connecting to the port. Either select and choose an existing user profile, or select + and create a new one.

Apply a different user profile to various clients and user groups: Select this check box and add one or more user profiles for different categories of users that you expect to make wired connections to the access port.

If a single device, such as a printer, is always connected to this port, leave the check box cleared and just apply the default user profile for infrastructure devices like printers. If you expect different types of users, such as employees, consultants, and visiting VIPs, to use the port as needed to connect their computers to the network, then select the check box and set up classification rules to govern when to apply different user profiles.

Traffic Filter Management:Select which management and diagnostic services—SSH, Telnet, Ping, and SNMP—to allow access to the mgt0 interface through the access port.

Native VLAN: The native (untagged) VLAN is the VLAN assigned to frames that do not have any 802.1Q VLAN tags in their headers. By default, Extreme Networks devices use VLAN 1 as the native VLAN.

Allowed VLANs: Enter the VLANs—including the native VLAN—that you want the trunk port to allow. You can list the VLANs individually, separated by commas, or as a range of VLANs using a hyphen. Alternatively, you can enter the word all (the default) in this field to support all existing VLANs previously configured in the network policy.

Note

When you enter all, the router allows all VLANs configured in the network policy, not all VLANs from 1 to 4094. .

Because a router WAN port connects to an external network such as the Internet, there are no additional settings for authentication, VLANs, or traffic filters.

Because an XR600P supports multiple PPPoE WAN ports, define multiple PPPoE WAN port priorities as Primary, Backup1, Backup2, or Backup3. Select Save when you are done.

Skyus DS

Verizon U620L

Verizon Pantech UML290

ConnectedIO LT1000

Port Details: View information about the interfaces on the router, add or modify the port type assigned to each interface, and modify the WAN priority settings.

Port Settings: Displays the physical interface names, and allows you to select the transmission types and speeds.

PSE: Choose the PSE (power sourcing equipment) power settings for the router to provide to PDs (powered devices) through the ETH1 and ETH2 ports.

The ETH0 and USB interfaces are preconfigured as WAN ports and their port type cannot be changed; however, you can change their WAN priorities to determine which of them is primary, backup1, or (if an Ethernet interface was configured as a WAN port, backup2.

You can configure the ETH1 – ETH4 interfaces as access, trunk, or WAN ports. For access ports, you can see the name of the default user profile and the VLAN associated with it. For trunk ports, you can see the native and allowed VLANs.

For all interfaces, you can see if they are enabled or not, and for all Ethernet interfaces, you can see descriptions.

The IEEE 802.3af PoE standard provides up to 12.95 W of DC power to each device (this rate reflects normal power loss through cables). 802.3af meets the power demands of Class 0, 1, 2, and 3 devices.

With 802.3af extended, the maximum power a PoE-enabled interface can deliver is 18 W of DC power.

The IEEE 802.3at PoE standard provides up to 25.5 W of DC power to each device (this rate reflects normal power loss through cables). 802.3at meets the power demands of Class 4 devices.