ExtremeCloud IQ User Guide Version 24.4.0
>
Configure Common Objects
> Authentication Configuration
Published June 01, 2024
Search this document
Print this page
Email this page
View PDF
Previous
Next
Preface
Text Conventions
Documentation and Training
Help and Support
Send Feedback
Release Notes
Welcome to ExtremeCloud IQ
Navigate ExtremeCloud IQ
Onboarding
Add Devices Overview
Quick Add Devices
Quick Add Tunnel Concentrators
Add Locally Managed Devices
Enhanced Discovery
Add Devices with Advanced Onboarding
About Digital Twin
Wireless AP Overview
AP3000 Series Radios and 6 GHz Support
AP4000/AP4000-1 Radios and 6 GHz Support
AP5000 Series Radios and 6 GHz Support
Administration
About Global Settings
Manage Account Details
Enable Two-Factor Authentication
Enable ExtremeCloud IQ Classic
Add a Credential Distribution Group
Add an Administrator Account
Manage Licenses Overview
Link Your Extreme Networks Portal Account
Manage Licenses
Set a Device Default Password
Manage the Virtual IQ
Enable Single Sign On (SSO)
Set Email Notifications
Manage API Access Tokens
Generate API Access Tokens
Add an API Presence and Data Location Feed
Add a Third-Party API Token
Download Logs
Audit Logs
Download Audit Logs
GDPR Audit Log
Download the GDPR Audit Log
KDDR Logs
Download KDDR Logs
Authentication Logs
Download Authentication Logs
Accounting Logs
Download Accounting Logs
Credential Logs
Download Credential Logs
Email Logs
Download Email Logs
SMS Logs
Download SMS Logs
Enable SSH Availability
Enable Supplemental CLI
Configure Users
Add a User
User Settings
Bulk Create Users
Bulk Create Settings
Add a User Group
Cloud User Group Settings
Local User Group Settings
Add a User to a User Group
Bulk Add Users to a User Group
Configure a Private Client Group
Unlock Users
Perform a RADIUS Test
Unbind a Device
Configure Network Policies
Add a Network Policy
Configure Policy Settings
Configure DNS Server Policy Settings
Configure NTP Server Policy Settings
Configure SNMP Server Policy Settings
Configure Syslog Server Policy Settings
Configure Device Credentials Policy Settings
Configure the Device Time Zone
Configure HIVE Policy Settings
Configure Management and Native VLAN Policy Settings
Configure IP Tracking Policy Settings
Configure LLDP/CDP Policy Settings
Configure Management Options
Configure Traffic Filters Policy Settings
Configure MGT IP Filter Policy Settings
Deploy a Network Policy
Configure the SSID for a Standard Wireless Network
About SSIDs
About SSID Usage in Standard Wireless Networks
Configure Enterprise SSID Authentication
Configure Personal SSID Authentication
Configure Private Pre-Shared Key SSID Authentication
Configure Private Client Group Options
Configure MAC Authentication
About Captive Web Portals
Customize and Preview Cloud-based Captive Portal Settings
Customize and Preview Device-based Captive Web Portal Settings
Import Captive Web Portal HTML Files
About RADIUS Authentication
Configure a RADIUS Server Group
Configure RADIUS Server Settings
Configure an External RADIUS Server
Configure an Extreme Networks A3 Server
Configure an Extreme Networks RADIUS Server
Configure an AAA Server Profile
Configure AAA Server Security Options
Add an Active Directory Server
Add an LDAP Server
Configure an Extreme Networks RADIUS Proxy
Configure a RADIUS Proxy Server Realm
Add Approved RADIUS Clients
Configure Realm Settings
Apply Different User Profiles to Clients and User Groups
Customize Advanced Access Security Settings
Configure VLAN Settings
Add a VLAN Group
Customize Wireless Network Optional Settings
Customize Radios and Rates Settings
Customize DoS Prevention
Customize Traffic Filters
Customize the User Profile Application Sequence
Customize Voice Enterprise Options
Customize Wi-Fi Multimedia™
Customize Broadcast and Multicast Handling Settings
Customize Client Related Network Settings
Customize Other Options
Configure Device Templates
Configure Classification Rules for a Device Template
Fabric Attach
Configure Fabric Attach
Configure Device Data Collection and Monitoring Options
Configure iBeacon Service
Configure Presence Analytics
About Router Settings
Configure a Router Template
Configure Network and IP Address Allocation
About VPN Services
Configure Layer 3 VPN Services
Configure IPsec VPN Authority Settings
About Server-Client Credentials
Configure Advanced Server Options
Configure Advanced Client Options
Configure an SD-WAN Route Group
Configure a Routing Policy
Configure Path MTU Discovery
Configure Dynamic DNS
Configure WAN Tracking
Configure Common Objects
Policy Configuration
Configure AP Templates
Assign an Ethernet Port Profile
Configure Port Types
Configure Wireless Interfaces for an AP Template
Configure Wired Interfaces for an AP Template
Configure SES-Imagotag
SES-Imagotag Setup
Configure SES-imagotag in a Device Template
Configure SES-Imagotag on a Device Override
SES-Imagotag Settings
Configure AP Device Template Advanced Settings
Configure Auto-Provisioning
Configure a Bonjour Gateway
Bonjour Filter Rule Settings
Configure Classification Rules
Configure Client Monitor Profile Policies
Client Monitor Profile Settings
Add a Cloud Config Group
Configure a Fabric Attach Profile
Configure a HIVE Profile
HIVE Profile Settings
IoT Profiles
Thread Application
Manage IoT Profiles
Configure IoT Profile Settings
IoT Profile Settings
Configure the Thread Commissioner
Manage Port Types
Instant Port Profiles List
About Radio Profiles
Add a Radio Profile
Configure Neighborhood Analysis
About Channel Selection
Configure Channel Selection
Configure Dynamic Channel Switching
Optimize Radio Usage
About Radio Settings
Configure Radio Settings
Configure Backhaul Failover
Configure Outdoor Deployment
Configure RF Interface Reports
Configure Client SLA Definitions
Configure WMM QoS Settings
Configure Sensor Mode Scan Settings
Configure an SDR Profile
Configure a Schedule
Schedule Settings
Configure an Availability Schedule
Configure Switch Templates
Configure Switch Common Settings
Port Type Settings
Create a New Port Type
Configure STP Settings
Instant Port Profiles
Configure an Instant Port Profile
Create an Instant Port Device Type Profile
Configure Individual Ports
Configure Port Details
Universal Port Stacking Support Mode
Configure Port Settings Parameters
Configure PSE Parameters
Configure STP Parameters
Configure Storm Control
Aggregate LAG and LACP Ports
Configure Switch STP Settings
Assign an sFlow Receiver to a Switch Template
Routing
Network Allocation
Network Allocation - Routing
Static Routes
About Switch Stacks
Instantly Create a Switch Engine Stack
Manually Create a Switch Stack
Manage Switch Stacks
Configure Switch Device Template Advanced Settings
Configure URL Filtering Rules
Add a User Profile
Configure User Profile Security
Configure User Profile Client SLA
Configure User Profile Access Restrictions
Configure User Profile Traffic Tunneling
Configure User Profile QoS
Basic Configuration
Add Application Sets
Client Mode Profiles
Manage Client Mode Profiles
Configure a Client Mode Profile
Configure a Client Mode AP Profile using a Wired Connection and a Device Template
Configure DHCP Servers and DHCP Relay Agents
Add a DNS Service
Add IP Objects and Host Names
Add a MAC Object and Host Name
Add a Notification Template
Configure OS Objects
Add a VLAN Object
Apply VLANs to Devices Using Classification
Add a VLAN Group Object
Configure Supplemental CLI
Security Configuration
Add AirDefense Policies
Add IP Firewall Policies
Add MAC Firewall Policies
Configure MGT IP Filters
MGT IP Filter Settings
Configure Traffic Filters
Traffic Filter Settings
Add a WIPS Policy
Configure Rogue AP Detection
QoS Configuration
About QoS
About Classifier Maps
Configure Classifier Map Services
Configure Classifier Maps Based on MAC OUIs
Configure Classifier Maps Based on SSIDs
Configure Classifier Maps Based on 802.1p/DiffServ/802.11e
Configure Marker Maps
Configure Rate Limiting and Queuing
Management Configuration
Configure a DNS Server
DNS Server Settings
Configure an NTP Server
NTP Server Settings
Configure an SNMP Server
SNMP Server Settings
Configure a Syslog Server
Syslog Server Settings
Network Configuration
Configure an Access Console
Configure ALG Services
Configure LLDP and CDP
LLDP and CDP Settings
Configure an IP Tracking Group
IP Tracking Group Settings
Configure Layer 2 IPsec VPN Services
Configure IPsec VPN Authority Settings
About Server-Client Credentials
Configure Advanced Server Options
Configure Advanced Client Options
Configure Location Servers
Configure Track Client Location Using an AeroScout Location Server
Configure Track Client Location Using an Extreme Location Server
Configure Track Client Location Using the Tazmen Protocol
Add Management Options
Management Options
Configure Forwarding Engine Control Management Options
Configure System Settings Management Options
Configure Authentication Settings Management Options
Configure Tunnel Concentrator Services
Single Tunnel Concentrator Services Settings
Redundant Tunnel Concentrator Services Settings
Configure Tunnel Policies
Configure an sFlow Receiver
Configure Network Services
Add a Subnetwork Space
Configure Subnetwork Space Advanced Settings
Configure a Firewall Policy
Authentication Configuration
Configure an LDAP Server
LDAP Server Settings
Certificate Configuration
Create a Certificate and Key
Create an ExtremeCloud IQ Certificate of Authority
Create a CSR for a Server
Concatenate an Existing Certificate and Private Key
Create a Self-signed Certificate
Import a Certificate or Key
Manage
Summary
Use the Filter Sidebar
Real-Time Maps
Add a Floor Plan
Import a Third-Party RF Heatmap
Edit a Real-Time Floor Map
Planning
Location Tree Changes
Add a Site Group
Add a Site
Import a Map
Add a Building
Draw a Building Perimeter
Add Interior Walls and Obstructions
Add a Floor
Draw a Floor Plan
Size a Floor Plan
Plan Devices
Automatically Add Simulated Devices
Manually Add Simulated Devices
View Heatmaps
Devices
Manage Devices
Filter the Device List
Device List Columns
Inventory View
Site Engine Managed View
Add or Edit a Custom View of Device List Columns
Device Status Icons
Utilities
Device Diagnostics
Restart Device to Default
Spectrum Intelligence
Spectrum Intelligence Details
Restart PSE
Client Information
Get Tech Data
Locate Device
Neighbor Information
Packet Capture (for IQ Engine APs)
Switch VLAN Probe Utility
SSH Availability
Download Tech Support File
Actions Menu Overview
Bootstrap Configuration
Update Netdump Settings
Clone a Device
Enhanced Discovery Action
Device Details Overview
Device Details Monitor Functions
Interfaces
Routing
Clients
Diagnostics
Events
Alarms
Device Details Configuration Tasks
AP Device Configuration
Switch Device Configuration
Device Management Servers
Configure Switch Ports and VLAN
Configure Port Router Forwarding
Device Details Configure Supplemental CLI
About Digital Twin
Interface Configuration
Configure Device Credentials
Configure Netdump
Assign an sFlow Receiver to a Switch
Device Level WAN Stateful Firewall
Configure VRRP
Configure SSH
Location Information Configuration Settings
Configure DHCP Server and Relay Settings
Configure Bonjour Gateway Settings
Device Details Neighbor Devices
Router URL Filtering
Push the Device-Level Configuration to the Device
Upload and Manage Media Gallery Content
Manage Active Alarms
Clients
Users
View Connected Users
Connected Users List
User Details
Events
Alerts
Manage Alerts
View Legacy Alarms
Alert Policy
Add or Edit a Site Policy
Alert Rules Overview
Configure Alert Rules
Manage Notifications
Add or Edit an Email Notification
Add or Edit a Webhook Notification
Reports
Create a Network Summary Report
Generate a PCI DSS 3.2 Report
Generate a WIPS History Report
Generate a Wi-Fi Statistics Summary
Generate a Client Tracking Report
Generate a Switch Summary Report
Time Range for Reports
Applications
Applications List
Add a Custom Application
Application Detection Rules Settings
Rogue APs
Rogue Clients
About Client Monitor
Search for Clients
About the Issue List Table
Troubleshoot an Issue
Take Action for a Client Issue
Download Issue Lists
About Diagnosis
Perform a Change Status Email Notification
Packet Capture
Manage Packet Capture Sessions
Add and Start a Packet Capture Session
VPN Management
Set the Time Frame for Captured Data Displays and Reports
ML Insights
Network 360 Monitor Overview
Status Cards
Device View
Zone View
Topology Tab
Map Tab
Network Scorecard
About Client 360
Connection Details Panel (Wireless)
Session Details (Wireless)
Device Details Panel (Wireless)
Client Tools (Wireless)
Client Alias
Thread Monitoring
Essentials
ExtremeIOT Essentials in ExtremeCloud IQ
Extreme AirDefense Essentials in ExtremeCloud IQ
ExtremeGuest Essentials in ExtremeCloud IQ
ExtremeLocation Essentials in ExtremeCloud IQ
CoPilot Dashboard
Connectivity Experiences
Quality Index for Wireless Devices Widget
Quality Index for Wired Devices Widget
Connectivity Experiences Table
Connectivity Experiences Panel (Wireless)
Client Association (Wireless)
Client Authentication (Wireless)
Time to Obtain IP Address (Wireless)
Connectivity Experiences Panel (Wired)
Port Errors
Anomalies
Instant Anomaly Detection
Top Anomalies by Site Widget
Anomalies by Severity Widget
Top Anomalies by Type Widget
Adverse Traffic Patterns
DFS Recurrence
PoE Stability
Port Efficiency
Wi-Fi Capacity
Wi-Fi Efficiency
Anomalies Table
Anomaly Information for a Device
Submit a Support Ticket
Anomaly Trends
Authentication Configuration
The topics in this section provide details about configuration objects for authentication.
Configure an LDAP Server
