Authenticating Network Login Users Through a RADIUS Server
You can use a RADIUS server to authenticate network login users and supply configuration data that the switch can use to make dynamic configuration changes to accommodate network login users.
A RADIUS server allows you to centralize the authentication database, so that you do not have to maintain a separate local database on each switch. RADIUS servers provide the following services for network login sessions:
- Username and password authentication
- Standard RADIUS attributes and Extreme Networks VSAs that the switch can use for dynamic configuration
- Accounting service (tracks authentication and authorization events)
To use RADIUS server features, you need the following components:
- RADIUS client software, which is included in the ExtremeXOS software.
- A RADIUS server, which is a third-party product.
NoteRADIUS provides many of the same features provided by TACACS+, but the network login feature does not work with TACACS+.
The following sections provide more information on network login session authentication: