User's Guide

Table Of Contents

The threshold in seconds that determines if the client authentication requests are blocked.

This is the window of time in which the failed authentication attempts occur. Valid values are

1 to 10 seconds. The default value is 3 seconds.

Quiet Timeout (Seconds)

The amount of time that authentication requests from the client are blocked before its

RADIUS requests are forwarded to the RADIUS server again. Valid values are 1 to 300

seconds. The default value is 300 seconds (5 minutes).

By default, if 5 attempts are made within 3 seconds, the client authentication requests are

blocked for 300 seconds (5 minutes), and RADIUS requests from that client are ignored. After 5

minutes, client RADIUS requests are forwarded to the RADIUS server again.

Note

In Failover mode, the Deny list is published to the peer Extreme Campus Controller.

Operator Name

RADIUS attribute composed of the operator namespace identiﬁer and the operator name. The

combination of operator name and namespace identiﬁer uniquely identiﬁes the owner of an

access network. The Operator Name cannot exceed 253 bytes. Valid values are:

• Tadig — Three-character Country Code followed by a two- character alphanumeric operator

• Realm — Registered Domain Name of Operator

• E212 — Mobile Country Code or Mobile Network Code

• OneCC — Three-character Country Code followed by 1-6 uppercase ITU Carrier Codes

• None

RADIUS Authentication Servers

To add RADIUS servers for authentication, select Add. You can conﬁgure up to four RADIUS

servers for authentication.

RADIUS Accounting Servers

To add RADIUS servers for accounting, select Add. You can conﬁgure up to four RADIUS servers

for accounting.