Configuring a RADIUS Server Group

Navigation

Navigate using the tab icons. Hover over an icon to see the name of the tab.

Configure > Network Policies > policy_name  > Wireless Networks > SSID_name  > Default RADIUS Server Group > +

or

Configure > Network Policies > policy_name  > Wireless Networks > SSID_name  > Apply RADIUS server groups to devices via classification > Add

About RADIUS Server Groups

Extreme Networks objects are classified by location. Add your devices to a Extreme Networks topology map before you create objects that can be applied to a classification group. For details on how to add devices, see ML Insights Network 360 Plan.

In the Authenticate via RADIUS Server section, you can add a new RADIUS server, or make changes to an existing one. To do this, you must select the SSID Access Security tab, and enable WPA/WPA2 802.1X (Enterprise). You can then configure an external RADIUS authentication, or an internal Extreme Networks RADIUS authentication server on their respective pages.

External RADIUS Server

Plan your devices and define your external RADIUS device object profile with a default RADIUS server (see External RADIUS Server Settings), and then apply classification rules as described in "RADIUS Classification Rules".

Extreme Device as RADIUS Server

An Extreme Networks device can act as a RADIUS authentication server and respond to 802.1X authentication requests from other devices acting as RADIUS authenticators. The Extreme Networks RADIUS server can store user accounts locally or check user login credentials against user accounts stored externally on the following user database servers: Active Directory and LDAP. For more complete information, see Active Directory Server Settings. and LDAP Servers. Also, see AAA Server Settings.

Note

An Extreme Networks RADIUS server must have a static IP address.

Set the following parameters for an Extreme Networks RADIUS server on a configured AP or router. When complete, assign these settings to the device. Then upload the configuration to it.

Note

Before uploading this configuration to the device that you intend to make a RADIUS server, upload the certificate and key files to it first.

To select the Extreme Networks device to be configured as a RADIUS Server, select . From the dialog box that appears, select the device, and then choose Select. When you are done, select Save.

RADIUS Classification Rules

1. Select the check box to apply RADIUS server groups to devices using classification rules.
2. Select to define a name and optional description, and then select Save. Alternatively, you can select existing RADIUS servers from the drop-down list .

1. Select and select either External RADIUS Sever or Extreme Networks RADIUS Server for the group profile. If you choose External RADIUS Server, enter a name, description, IP address/Host name, Server Type, ports for authentication and accounting and shared secret for authenticating communications with the RADIUS server. Then confirm secret to ensure accuracy. Select Save. If you choose Extreme Networks RADIUS Server, select . From the dialog box, select the check boxes for the devices that you want to act as RADIUS servers, and then choose Select. Select Save.

1. To add rules for the server group, select to create a new classification rule by adding a name and a description. (Alternatively, you can select to copy or select an existing classification rule.)

1. Select Save.
2. Select to choose Device Location. Assign your RADIUS object group based on the location of managed devices, and then choose Select. When you select a location, be sure to drill down to the actual floor on which the devices are deployed.

1. Select to expand the menus and verify the information for the RADIUS server name, type, IP/Hostname, and location that you selected in Step 6.

Modify, Copy, and Delete RADIUS Server Groups

Select to display the RADIUS Server Groups dialog box, and then choose Select, Copy, or to choose, copy (clone) or delete RADIUS server objects.