Configure an AAA Server Profile

First, configure an Extreme Networks RADIUS Server. See Configure an Extreme Networks RADIUS Server.

Extreme Networks devices can serve as RADIUS authentication servers and respond to 802.1X requests from other Extreme Networks RADIUS authenticators. The Extreme Networks RADIUS server can store user accounts locally or check user login credentials against user accounts stored externally on Active Directory or LDAP (lightweight directory access protocol) user database servers.

This task is part of the network policy configuration workflow. Use this task to configure an AAA server profile.

  1. On the Wireless tab, select Add Radius Server Group.
  2. Select EXTREME NETWORKS RADIUS SERVER.
  3. Type a RADIUS Server Group Name.
  4. Type an optional RADIUS Server Group Description.
  5. Select the User Database type.
    • Active Directory: Select to enable an Extreme Networks RADIUS server to interoperate with an Active Directory server.
    • LDAP Server: Select to direct user account look-ups to one or more LDAP servers.
    • Local Database: Select to enable an Extreme Networks device to support authentication for local user groups.
  6. Select the corresponding check boxes for the devices that you want to configure.
  7. Select CREATE NEW to add a new AAA server profile.

    Alternately, select USE EXISTING, and then select an AAA server profile from the list.

  8. Type a Profile Name.
  9. Type an optional Profile Description.
  10. Select the User Database type: Active Directory, LDAP Server, or Local Database.

    Available configuration options depend on the type of database that you select.

  11. Type a User Group Attribute, and then select an existing user group from the Select menu.
  12. Expand the Additional Settings section, and then enter the number of seconds for each response scenario.

    The Additional Settings section is not available for local databases.

  13. Select Enable Caching of Credentials to improve performance across WAN links.
  14. Type the number of seconds to retain the credential cache.
  15. Complete the database-specific configuration options as follows:
    User database type Configuration
    Active Directory See Add an Active Directory Server.
    LDAP Server See Add an LDAP Server.
    Local Database The Extreme Networks device that authenticates users directly, maintains the user database locally.
  16. Select Security Options, and then Configure AAA Server Security Options.
  17. Select Approved RADIUS Clients, and then Add Approved RADIUS Clients.
  18. Select SAVE RADIUS SERVER.

Continue configuring the RADIUS server profile.

9038923-00 Rev AB