Specifications

Features Supported in ExtremeWare 7.4.2 and Later
ExtremeWare 7.4.3 Installation and Release Notes 13
MAC-Based RADIUS Authentication for Network Login
MAC-based RADIUS authentication uses the MAC address of the client for authentication. This feature
is useful for devices that cannot function as 802.1x supplicants, such as IP phones. RADIUS is used as
the transport protocol for authentication.
The RADIUS server must be populated with the MAC addresses of all clients or with a MAC address
and mask. The MAC address in ASCII format without colons is used as the user name in the RADIUS
request, with the locally configured password. While sending RADIUS request the switch will send the
configured password in all uppercase letters and the same should be configured on the RADIUS server
for the corresponding user name. If a password is not configured locally, then the switch will not send
any RADIUS request for that particular supplicant. When a new MAC address is detected on a port that
is enabled for MAC-based network login, the RADIUS client sends an authentication message (RADIUS
access-request) to the RADIUS server for validation. The RADIUS client tries the configured maximum
number of retries to validate the supplicant. During the time between the RADIUS access-request sent
by the switch and the RADIUS response sent by the RADIUS server, all traffic sent by the supplicant is
blocked. Refer to the ExtremeWare 7.4 User Guide for more information.
.Bxtr Software Image
Beginning with ExtremeWare 7.3, ExtremeWare is now offered in two software images: .xtr and .Bxtr.
The .Bxtr software image is available on all Summit platforms. It does not support the following
features:
• UAA (available on Alpine switches only)
• PoE (available on Alpine switches only)
• SSL (HTTPS)
Although the BlackDiamond 6804 and BlackDiamond 6808 switches use the .xtr software image, the
BlackDiamond switches do not support UAA and PoE.
To use SMA and SONET, the advanced image (.xtr or Sxtr) must be used (PD3-10674849 and
PD3-10693717).
Features Supported in ExtremeWare 7.4.2 and Later
The following features are supported in ExtremeWare 7.4.2 and later:
• Remote Connect
Remote Connect Discovery and Attachment Switch VLAN Configuration Requirements
The discovery and attachment switches should have two separate VLANs: one for direct connect,
and a second for remote connect.
— Direct connect VLAN (or wireless management VLAN)
The wireless management VLAN is only used for direct connect and upgrading the A300. The
A300 comes up faster if the subnet does not have DHCP scope configured, or if it is using forced
EDP bootup in Option 43 of the DCHP scope associated to the subnet.
— Do not use the WMV IP address for the discovery entries in DNS or the attachment IP in
redirect-db.