User-Authentication Configurations
A Universal Port user-authenticate configuration
requires specific components:
-
An Extreme Networks switch, which might need to include
PoE (Power over Ethernet) support.
-
RADIUS server for user authentication and VSA transmission.
-
Supplicants that support the authentication method you select.
Link Layer Discovery Protocol support is recommended, but is optional when MAC
address authentication is used.
Note
To support supplicant configuration, you might
consider adding a
DHCP (Dynamic Host Configuration Protocol) server to your network. For VoIP
applications, you can use a TFTP server and a call server to provide for additional
supplicant configuration.
Use the following procedure to configure Universal Port
for user login:
-
Configure the RADIUS server as described in Security. The configuration should
include the following:
- User
ID and password for RADIUS clients.
- Extreme Networks custom VSAs.
- Addition of the edge switch as a RADIUS client.
-
Create a user-authenticate profile as described in Creating and Configuring New Profiles.
-
Create a user-unauthenticate profile as described in Creating and Configuring New Profiles.
-
Assign the user-authenticate profile to the edge ports as
described in Configuring a User Login or Logout Event Trigger.
-
Assign the user-unauthenticate profile to the edge ports
as described in Configuring a User Login or Logout Event Trigger.
-
Configure network login on the edge switch as described in
Network Login.
-
Configure the edge switch as a RADIUS client as described
in Security.
-
Verify that correct profiles are assigned to correct
ports by entering the following command:
-
Enable LLDP message advertisements on the ports that are
configured for device-detect profiles as described in LLDP Overview.
-
Test profile operation as described in Verifying a Universal Port Profile.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB