A Universal Port user-authenticate configuration
requires specific components:
-
An Extreme Networks switch, which might need to include
PoE support.
-
RADIUS server for user authentication
and VSA transmission.
-
Supplicants that support the authentication method you select.
LLDP support is recommended, but is optional when MAC
address authentication is used.
Note
To support supplicant configuration, you might
consider adding a
DHCP server to your network. For VoIP
applications, you can use a TFTP server and a call server to provide for additional
supplicant configuration.
Use the following procedure to configure Universal Port
for user login:
- Configure the RADIUS server as described in Security. The configuration should
include the following:
- User
ID and password for RADIUS clients.
- Extreme Networks custom VSAs.
- Addition of the edge switch as a RADIUS client.
- Create a user-authenticate profile as described in Creating and Configuring New Profiles.
- Create a user-unauthenticate profile as described in Creating and Configuring New Profiles.
- Assign the user-authenticate profile to the edge ports as
described in Configuring a User Login or Logout Event Trigger.
- Assign the user-unauthenticate profile to the edge ports
as described in Configuring a User Login or Logout Event Trigger.
- Configure network login on the edge switch as described in
Network Login.
- Configure the edge switch as a RADIUS client as described
in Security.
- Verify that correct profiles are assigned to correct
ports by entering the following command:
show upm event event-type
- Enable LLDP message advertisements on the ports that are
configured for device-detect profiles as described in LLDP Overview.
- Test profile operation as described in Verifying a Universal Port Profile.
