User's Guide
Table Of Contents
- Table of Contents
- Preface
- Welcome to Extreme Campus Controller
- Dashboard
- Monitor
- Sites List
- Device List
- Access Points List
- Smart RF Widgets
- Switches List
- Networks List
- Clients
- Policy
- Configure
- Network Configuration Steps
- Sites
- Add a Site
- Modifying Site Configuration
- Site Location
- Adding Device Groups to a Site
- Add or Edit a Configuration Profile
- Associated Profiles
- Associated Networks
- Mesh Point Profile Configuration
- Configure Client Bridge
- Understand Radio Mode
- Radio as a Sensor
- Advanced AP Radio Settings
- VLAN Profile Settings
- AirDefense Profile Settings
- ExtremeLocation Profile Settings
- IoT Profile Settings
- Positioning Profile Settings
- Analytics Profile Settings
- RTLS Settings
- Advanced Configuration Profile Settings
- Configuring RF Management
- Configuring a Floor Plan
- Advanced Tab
- Devices
- Networks
- Policy
- Automatic Adoption
- ExtremeGuest Integration
- AAA RADIUS Authentication
- Onboard
- Onboard AAA Authentication
- Manage Captive Portal
- Manage Access Control Groups
- Access Control Rules
- Tools
- Administration
- System Configuration
- Manage Administrator Accounts
- Extreme Campus Controller Applications
- Product License
- Glossary
- Index
When this setting is set to Failover, a RADIUS request is sent to one server at a time:
• The RADIUS request is sent to the Primary server (based on the RADIUS server order in the
AAA policy).
• When the Primary server is not accessible, the request is sent to the second server (the
Failover server).
• When the Primary server is accessible, the request is automatically sent to the Primary server
instead of the Failover server.
Note
The RADIUS Status message (RFC 5997) indicates if the RADIUS server is
accessible.
When this setting is set to Load Balance, a RADIUS request is sent in round robin fashion:
• When a RADIUS server is not accessible, Extreme Campus Controller stops sending requests
to that server.
• When a server is accessible, the server is added to the pool of servers.
Note
The RADIUS Status message (RFC 5997) indicates if the RADIUS server is
accessible.
Note
There is no correlation between the RADIUS server that is used for authentication and
the RADIUS server that is used for accounting.
RADIUS Accounting Servers Mode
Determines the server selection mode when accounting packets are sent to a single server.
When the selected accounting server does not respond to the accounting requests, the
accounting packets are sent to the next configured accounting server. The selection applies to all
Services and to all sites on Extreme Campus Controller.
• Round-Robin — The server is selected on a round-robin basis starting at the top of the list of
approved servers. The first server is used until it fails, and that pattern continues down the
list. When the last server fails, then the first server is used again.
• Broadcast — RADIUS accounting packets are sent to all configured accounting servers in the
AAA Policy.
For controllers in an availability pair, the primary and backup servers must be synchronized
when the WLAN Services are synchronized. (For more information, see Availability Pair
Settings on page 369. If the primary server has failed resulting in a backup server being used
for authentication, the controller periodically sends a "Health Check" to the primary server to
see if it has recovered. If the primary server has recovered, the controller starts using the
Configure
Configure AAA Policy
Extreme Campus Controller User Guide for version 5.46.03 291