User-Authentication Configurations

A Universal Port user-authenticate configuration requires specific components:

An Extreme Networks switch, which might need to include PoE (Power over Ethernet) support.
RADIUS (Remote Authentication Dial In User Service) server for user authentication and VSA transmission.
Supplicants that support the authentication method you select. LLDP (Link Layer Discovery Protocol) support is recommended, but is optional when MAC address authentication is used.

Note

To support supplicant configuration, you might consider adding a DHCP (Dynamic Host Configuration Protocol) server to your network. For VoIP applications, you can use a TFTP server and a call server to provide for additional supplicant configuration.

Use the following procedure to configure Universal Port for user login:

Configure the RADIUS server as described in Security. The configuration should include the following:
- User ID and password for RADIUS clients.
- Extreme Networks custom VSAs.
- Addition of the edge switch as a RADIUS client.
Create a user-authenticate profile as described in Creating and Configuring New Profiles.
Create a user-unauthenticate profile as described in Creating and Configuring New Profiles.
Assign the user-authenticate profile to the edge ports as described in Configuring a User Login or Logout Event Trigger.
Assign the user-unauthenticate profile to the edge ports as described in Configuring a User Login or Logout Event Trigger.
Configure network login on the edge switch as described in Network Login.
Configure the edge switch as a RADIUS client as described in Security.
Verify that correct profiles are assigned to correct ports by entering the following command:

show upm event event-type
Enable LLDP message advertisements on the ports that are configured for device-detect profiles as described in LLDP Overview.
Test profile operation as described in Verifying a Universal Port Profile.

Published March 2020prev | next

Email this topic

Print this page Print this page

Leave feedback Feedback