Authenticating Network Login Users Through a RADIUS Server

You can use a RADIUS (Remote Authentication Dial In User Service) server to authenticate network login users and supply configuration data that the switch can use to make dynamic configuration changes to accommodate network login users.

A RADIUS server allows you to centralize the authentication database, so that you do not have to maintain a separate local database on each switch. RADIUS servers provide the following services for network login sessions:

Username and password authentication
Standard RADIUS attributes and Extreme Networks VSAs that the switch can use for dynamic configuration
Accounting service (tracks authentication and authorization events)

To use RADIUS server features, you need the following components:

RADIUS client software, which is included in the ExtremeXOS software.
A RADIUS server, which is a third-party product.

Note

RADIUS provides many of the same features provided by TACACS+, but the network login feature does not work with TACACS+.

The following sections provide more information on network login session authentication:

Published March 2020prev | next

Email this topic

Print this page Print this page

Leave feedback Feedback