Configure an AAA Server Profile

Before you can perform this task, you must create a network policy with an SSID with Enterprise (WPA/WPA2 802.1X) access security, and a default RADIUS server group.

Extreme Networks devices can serve as RADIUS authentication servers and respond to 802.1X requests from other Extreme Networks RADIUS authenticators. The Extreme Networks RADIUS server can store user accounts locally or check user login credentials against user accounts stored externally on Active Directory or LDAP (lightweight directory access protocol) user database servers.

This task is part of creating or editing a network policy. Use this task to configure an AAA server profile.

  1. Go to Configure > Network Policies.
  2. Select an existing policy and then select Edit, or select Add to create a new policy.
  3. On the Wireless tab, select Add Radius Server Group.
  4. Select EXTREME NETWORKS RADIUS SERVER.
  5. Enter a RADIUS Server Group Name.
  6. Enter an optional RADIUS Server Group Description.
  7. Select the User Database type.
    • Active Directory: Select to enable an Extreme Networks RADIUS server to interoperate with an Active Directory server.
    • LDAP Server: Select to direct user account look-ups to one or more LDAP servers.
    • Local Database: Select to enable an Extreme Networks device to support authentication for local user groups.
  8. Select the devices to configure.
  9. Select CREATE NEW to add a new AAA server profile.

    Alternately, select USE EXISTING and then select an AAA server profile from the list.

  10. Type a Profile Name.
  11. Type an optional Profile Description.
  12. For LDAP Server, select an existing LDAP server, or select the plus sign to add a new one.
    See Configure an LDAP Server for more information.
  13. For the Approved RADIUS Clients section, see Add Approved RADIUS Clients.
  14. For Security Options, see Configure AAA Server Security Options.
  15. Select the number of seconds to retain this credential cache.
  16. Select Enable Caching of Credentials to improve performance across WAN links.
  17. Expand the Additional Settings section, and then enter the number of seconds for each response scenario.
  18. For Active Directory, select an existing Active Directory user database, or select the plus sign to add a new one.
    See Add an Active Directory Server for more information.
  19. Select SAVE RADIUS SERVER.

Continue configuring the server.