User-Authentication Configurations
A Universal Port user-authenticate configuration
requires specific components:
-
An Extreme Networks
switch, which might need to include PoE support.
-
RADIUS server for user authentication and VSA transmission.
-
Supplicants that support the authentication method you select. LLDP
support is recommended, but is optional when MAC address authentication is used.
Note
To support supplicant configuration, you might
consider adding a DHCP server to your network. For VoIP applications, you can use a TFTP
server and a call server to provide for additional supplicant configuration.
Use the following procedure to configure Universal Port
for user login:
-
Configure the RADIUS server as described in Security. The configuration should
include the following:
- User
ID and password for RADIUS clients.
- Extreme Networks custom VSAs.
- Addition of the edge switch as a RADIUS client.
-
Create a user-authenticate profile as described in Creating and Configuring New Profiles.
-
Create a user-unauthenticate profile as described in Creating and Configuring New Profiles.
-
Assign the user-authenticate profile to the edge ports as
described in Configuring a User Login or Logout Event Trigger.
-
Assign the user-unauthenticate profile to the edge ports
as described in Configuring a User Login or Logout Event Trigger.
-
Configure network login on the edge switch as described in
Network Login.
-
Configure the edge switch as a RADIUS client as described
in Security.
-
Verify that correct profiles are assigned to correct
ports by entering the following command:
-
Enable LLDP message advertisements on the ports that are
configured for device-detect profiles as described in LLDP Overview.
-
Test profile operation as described in Verifying a Universal Port Profile.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB