Adding AAA NAS

Configuration → AAA → NAS → Add

Use the add NAS (Network Access Server) screen to configure RADIUS clients and their shared secret. Authentication requests received from RADIUS clients specified here are accepted by the ExtremeGuest RADIUS server. You can configure a single IP address or an IP subnet.

Starting with this release, ExtremeGuest can be deployed as the external authenticating server for the ExtremeCloud Appliance and ExtremeControl managed networks.

The ExtremeGuest AAA (Authentication, Authorization, and Accounting) NAS configuration (IP address/IP subnet and shared secret) should always point to the RADIUS client, the host sending the RADIUS request to the ExtremeGuest RADIUS server.

In WiNG deployments - the RADIUS client could be the controller, RF Domain manager or individual APs. If the RADIUS request is being proxied through the controller or RF Domain manager, configure the IP address and shared secret of the controller or RF Domain manager respectively. If the APs are directly communicating with the ExtremeGuest RADIUS server, configure the IP address and shared secret of each AP.
Note
The shared secret configured here should match with the RADIUS server shared secret configured in the AAA policy on the WING device (controller/RF Domain manager/APs).
In ExtremeCloud Appliance deployments - the RADIUS client is the ExtremeCloud Appliance host. Configure the IP address/IP subnet and shared secret of the ExtremeCloud Appliance host.
Note
The shared secret configured here should match with the RADIUS server shared secret configured in the AAA policy on the ExtremeCloud Appliance server.
In ExtremeControl deployments - the RADIUS client is the ExtremeControl host. Configure the IP address/IP subnet and shared secret of the ExtremeControl host.
Note
The shared secret configured here should match with the RADIUS server shared secret configured under Access Control → Configurations → AAA → RADIUS Servers on the ExtremeControl server.

To add AAA Networks:

Go to Configuration → AAA from the navigation menu.
The Authorization screen displays by default.
Select the NAS tab.
A list of existing AAA NAS configurations is displayed.
Select the icon to create a new NAS configuration.
The add AAA NAS screen displays.
AAA NAS Add Screen
Configure the following settings:

Name	Specify a unique name for the new AAA network. Note This setting is mandatory.
Description	Specify a description for the new AAA network. Note This setting is mandatory.
IP Address / mask	Displays the IP address and network mask associated with each network. Note This setting is mandatory.
Shared Secret	Enter the RADIUS client shared secret password in the Shared Secret field. This password is for authenticating the RADIUS NAS clients. Select the Show check box to expose the shared secret's actual character string, leaving the option unselected displays the shared secret as a string of asterisks (*).

Note

The shared secret configured here should be the same as the one configured in the AAA RADIUS server context on the WiNG device, ExtremeCloud Appliance, or ExtremeControl depending on where the network is configured.