Manage RADIUS Servers for User Authentication

Configure a list of RADIUS servers to authenticate users of ExtremeCloud IQ Controller.

Go to Administration > Accounts > RADIUS.
To add a RADIUS server to the Authentication Order, under Authentication Order, select Add.
Order the servers as Local first and RADIUS second until you have tested the RADIUS server.
To add the properties of the RADIUS server, under RADIUS Servers, select Add.

Select the IP Address field to display a list of available RADIUS servers. Select the RADIUS server row to add or delete a RADIUS server.

Note
CHAP is the default authentication method used by ExtremeCloud IQ Controller. When configuring integration with ExtremeControl™ specify CHAP on ExtremeControl.
Select the Test button to test your server connection.

Make sure the test completes successfully.
With the server order still Local first and RADIUS second, log in with your Active Directory user name and password.

If this fails, make sure your Remote Access Policy is returning the required Service-Type of Administrative.

Note

To allow ExtremeCloud IQ Controller to accept the RADIUS Attributes coming from the External authentication server, configure a Pass Through External RADIUS Rule. Go to OnBoard > Rules.