Authenticating Network Login Users Through a RADIUS Server

You can use a RADIUS server to authenticate network login users and supply configuration data that the switch can use to make dynamic configuration changes to accommodate network login users.

A RADIUS server allows you to centralize the authentication database, so that you do not have to maintain a separate local database on each switch. RADIUS servers provide the following services for network login sessions:

• Username and password authentication
• Standard RADIUS attributes and Extreme Networks VSAs that the switch can use for dynamic configuration
• Accounting service (tracks authentication and authorization events)

To use RADIUS server features, you need the following components:

• RADIUS client software, which is included in the ExtremeXOS software.
• A RADIUS server, which is a third-party product.

Note

RADIUS provides many of the same features provided by TACACS+, but the network login feature does not work with TACACS+.

The following sections provide more information on network login session authentication:

• Differences Between Network Login Authentication and Management Session Authentication
• Configuration Overview for Authenticating Network Login Users