Authentication Server Side

The RADIUS server used for authentication must be EAP-capable. Consider the following when choosing a RADIUS server:

Types of authentication methods supported on RADIUS, as mentioned previously.
Need to support VSAs. Parameters such as Extreme-Netlogin-Vlan-Name (destination vlan for port movement after authentication) and Extreme-NetLogin-Only (authorization for network login only) are brought back as VSAs.
Need to support both EAP and traditional user name-password authentication. These are used by network login and switch console login respectively.

Note

For information on how to use and configure your RADIUS server, refer to Configuring the RADIUS Client and to the documentation that came with your RADIUS server.