Deployment Guide
Table Of Contents
- Table of Contents
- Preface
- About Extreme Campus Controller Deployment
- Configuring DHCP, NPS, and DNS Services
- Centralized Site with a Captive Portal
- Centralized Site with AAA Network
- Deploying a Mesh Network
- Configuring an External NAC Server for MBA and AAA Authentication
- Manage RADIUS Servers for User Authentication
- External Captive Portal on a Third-Party Server
- Access Control Rule Admin Portal Access
- Deploying Centralized Web Authentication
- Deploying ExtremeCloud IQ - SE as an External Captive Portal
- Deployment Strategy
- Configuring an External Captive Portal Network
- Editing the Configuration Profile for Network and Roles
- Extreme Campus Controller Default Pass-Through Rule
- Adding Extreme Campus Controller as a Switch to ExtremeCloud IQ - Site Engine
- Editing the Unregistered Policy on ExtremeCloud IQ - Site Engine
- Editing the ExtremeCloud IQ - Site Engine Profile for Policy and Location-Based Services
- Deploying an ExtremeGuest Captive Portal
- Deploying Client Bridge
- Deploying an Availability Pair
- Deploying Universal APs
- Extreme Campus Controller Pair with ExtremeLocation and AirDefense
- ECP Local Authentication
- PHP External Captive Portal, Controller’s Firewall Friendly API
- Index
Table 20: Rule Configuration for Layer3/Layer4 Redirection Rules (continued)
Field Description
IP/Subnet User-Defined. Then specify the IP address of the captive portal.
The redirection role includes a rule that points to the CWA
server IP address.
Port Include at least one rule for HTTP port 80 or HTTPS port 443
The redirection role includes a rule for both HTTP port 80 and
HTTPS port 443
For more information about creating policy roles, see the Extreme Campus Controller User Guide.
Related Topics
Deployment Strategy on page 120
Configure AAA Policy — ExtremeControl on page 136
CWA Network Settings - ExtremeControl on page 140
CWA Policy Redirection Role — ExtremeControl on page 144
CWA Server Configuration — ExtremeControl on page 145
CWA Server Configuration — ExtremeControl
Configure an Authorization Policy on the CWA server to integrate with Extreme Campus Controller.
From the CWA server, you configure the redirect policy to return the specific redirect rule that you
configured on Extreme Campus Controller. The CWA Authorization Policy on the CWA server includes
three profiles: the Redirection Profile that is referenced from Extreme Campus Controller, an Allow
Profile, and a Deny Profile.
CWA integrates with a captive portal on an ExtremeControl server. The following topics outline how to
configure the ExtremeControl captive portal server:
• Configure CWA on ExtremeControl on page 146
Related Topics
Deployment Strategy on page 120
Configure AAA Policy — ExtremeControl on page 136
CWA Network Settings - ExtremeControl on page 140
CWA Policy Redirection Role — ExtremeControl on page 144
Deploying Centralized Web Authentication
CWA Server Configuration — ExtremeControl
Extreme Campus Controller Deployment Guide for version 5.46.03 145










