User's Guide
Table Of Contents
- Table of Contents
- Preface
- Welcome to Extreme Campus Controller
- Dashboard
- Monitor
- Sites List
- Device List
- Access Points List
- Smart RF Widgets
- Switches List
- Networks List
- Clients
- Policy
- Configure
- Network Configuration Steps
- Sites
- Add a Site
- Modifying Site Configuration
- Site Location
- Adding Device Groups to a Site
- Add or Edit a Configuration Profile
- Associated Profiles
- Associated Networks
- Mesh Point Profile Configuration
- Configure Client Bridge
- Understand Radio Mode
- Radio as a Sensor
- Advanced AP Radio Settings
- VLAN Profile Settings
- AirDefense Profile Settings
- ExtremeLocation Profile Settings
- IoT Profile Settings
- Positioning Profile Settings
- Analytics Profile Settings
- RTLS Settings
- Advanced Configuration Profile Settings
- Configuring RF Management
- Configuring a Floor Plan
- Advanced Tab
- Devices
- Networks
- Policy
- Automatic Adoption
- ExtremeGuest Integration
- AAA RADIUS Authentication
- Onboard
- Onboard AAA Authentication
- Manage Captive Portal
- Manage Access Control Groups
- Access Control Rules
- Tools
- Administration
- System Configuration
- Manage Administrator Accounts
- Extreme Campus Controller Applications
- Product License
- Glossary
- Index
3. Configure the following parameters for the default configuration:
Table 71: Default AAA Configuration Parameters
Field Description
Authentication Method Determines the method for user authentication. Additional
authentication parameters depend on the method you select
here. Valid values are:
• RADIUS. RADIUS Server authenticates user.
• Local. Extreme Campus Controller authenticates user.
• LDAP. LDAP server authenticates user.
Note: Internal Captive Portal supports Local and LDAP
authentication only, providing validation of client acceptance
status based on provided credentials. Indication of a specific
role for policy assignment change is not supported.
When using RADIUS or LDAP
authentication
First authenticate with configured RADIUS server, then use
LDAP server. Copy the Distinguished Name from the LDAP
server.
• Primary RADIUS — IP address of primary RADIUS server
• Backup RADIUS — IP address of backup RADIUS server.
• LDAP Configuration — Indicates the LDAP Configuration to
use as a default. Select from one of the configured LDAP
Configurations.
When using Local or LDAP
authentication
First authenticate locally, then use LDAP server. Copy the
Distinguished Name from the LDAP server.
• LDAP Configuration — Indicates the LDAP Configuration to
use as a default. Select from one of the configured LDAP
Configurations.
Authenticate Locally for MAC Authenticate the MAC address on Extreme Campus Controller.
Do not authenticate MAC address on the RADIUS server.
Related Topics
RADIUS Settings on page 297
Advanced RADIUS Settings on page 298
LDAP Configuration Settings on page 299
Managing RADIUS Servers
To manage the list of RADIUS servers:
1. Go to Onboard > AAA and select RADIUS Servers.
A list of configured RADIUS servers displays. From here, you can search for a server, edit server
settings, delete a server, or add a new RADIUS server.
2. To edit or delete a server, select a server row.
The server settings display.
• To edit, modify the server settings and click Save.
• To delete the server, click Delete.
Managing RADIUS Servers
Onboard
296 Extreme Campus Controller User Guide for version 5.46.03