Deployment Guide

ManualsBrandsExtreme Networks ManualsComputers & AccessoriesWired and wireless orchestration for campus and IoT networks

Table Of Contents

Table of Contents
Preface
- Conventions
  - Text Conventions
- Documentation and Training
- Send Feedback
- Help and Support
- AP Regulatory Information
About Extreme Campus Controller Deployment
- Deploying Extreme Campus Controller
- VE6120K, VE6125K Virtual Appliances
- VE6120H Virtual Appliance
- VE6120 Virtual Appliance
- VE6125 Virtual Appliance
- Supported Appliance Specifications
- Discovery and Registration
  - Discovery Process for APs and Adapters in a Centralized Site
    - Discovering Centralized Site APs and Adapters
  - Switch Discovery Process
    - Discovering Switches
    - Switch Discovery in an Availability Pair
- Sites
- Device Groups
Configuring DHCP, NPS, and DNS Services
- DHCP Service Configuration
  - Configuring DHCP on Windows Server 2012 R2
  - Configuring DHCP on a Red Hat Linux Server
    - Configuring DHCP Option 43 on a Linux Server
- Configuring the Extreme Campus Controller as an NPS Client
- NPS Service Configuration
  - Add a New Network Policy
    - Create Condition: Client IPv4 Addresses
    - Create Condition: Windows Groups
- DNS Service Configuration
  - Configuring DNS for Wireless AP Discovery
  - Configuring DNS on a Linux Server
- Configure Extreme Campus Controller for Local DHCP Management
  - Add a Physical Interface
  - Local DHCP Settings
Centralized Site with a Captive Portal
- Deployment Strategy
- Adding a Centralized Site with Device Group
- Configuring an Internal Captive Portal
- Specifying B@AC Network Topology
- Configuring a Captive Portal Network
- Working with Internal Captive Portal Engine Rules
- Editing Device Group Profile for Network and Role
- Creating Adoption Rules
Centralized Site with AAA Network
- Deployment Strategy
- Configuring a AAA Network
- Creating an Engine Rule
- Creating a Policy Role
- Applying a AAA Network and Role to the Device Group
Deploying a Mesh Network
- Deployment Strategy
- Mesh Point Network Settings
- Configure Device Groups for Mesh Point
- Advanced Configuration Profile and Mesh Device Settings
  - Profile Advanced Settings
  - Edit Mesh Device Settings
Configuring an External NAC Server for MBA and AAA Authentication
- Deployment Strategy
- Configuring the External NAC Server
- Network with Default Auth Role
  - Configuring an MBA Network
  - Configuring a AAA Network
- Network with Pass-Through External RADIUS
  - Configuring an MBA Network
  - Configuring a AAA Network
Manage RADIUS Servers for User Authentication
- RADIUS Settings
- Advanced RADIUS Settings
- Configure a Pass Through Rule
External Captive Portal on a Third-Party Server
- Firewall Friendly External Captive Portal Flow of Events
  - FF-ECP on Extreme Campus Controller
- Configure the Firewall
- Configure an External Captive Portal
- Understand Processing Performed by the ECP
  - The Redirection URL Sent from Extreme Campus Controller
    - Verifying the Signed Request
  - Compose the Login or Splash Screen Page
- Approve the Client
- Compose the Redirection Response Sending the Browser back to the Appliance
Access Control Rule Admin Portal Access
- Deployment Strategy
- Configure Access Control Group
  - Default Access Control Groups
- Configure Admin Access Policy Role
- Configure Access Control Rule
  - Default Access Control Rules
- Define Rule Precedence
Deploying Centralized Web Authentication
- Deployment Strategy
- CWA with ISE Deployment
- CWA with ExtremeControl Deployment
Deploying ExtremeCloud IQ - SE as an External Captive Portal
- Deployment Strategy
- Configuring an External Captive Portal Network
- Editing the Configuration Profile for Network and Roles
- Extreme Campus Controller Default Pass-Through Rule
- Adding Extreme Campus Controller as a Switch to ExtremeCloud IQ - Site Engine
- Editing the Unregistered Policy on ExtremeCloud IQ - Site Engine
- Editing the ExtremeCloud IQ - Site Engine Profile for Policy and Location-Based Services
Deploying an ExtremeGuest Captive Portal
- Deployment Strategy
- Configure an ExtremeGuest Server
- Configure an ExtremeGuest Captive Portal Network
- Configuration Settings on ExtremeGuest
Deploying Client Bridge
- Deployment Strategy
- AP Client Bridge
- Configure Client Bridge
Deploying an Availability Pair
- Deploying an Availability Pair
Deploying Universal APs
- Onboarding Universal APs — ExtremeCloud IQ, Extreme Campus Controller
Extreme Campus Controller Pair with ExtremeLocation and AirDefense
- Scenario Outline
- Deployment Strategy
- Configuring the Centralized Site with an AP3915 Profile
- Configuring ExtremeLocation
- Configuring AirDefense
ECP Local Authentication
- Scenario Outline
- Deployment Strategy
- Configuring External Captive Portal Network
- Editing the Device Group Profile for ECP Network
PHP External Captive Portal, Controller’s Firewall Friendly API
- net-auth.php
- login.php
- common_utilities.php
- crypt_aws_s4.php
- ffecp-config.php
Index
- A
- B
- C
- D
- E
- F
- L
- M
- N
- P
- R
- S
- T
- U
- W
- X

Edit Mesh Device Settings

Conﬁgure Proﬁle Edit Mesh Device Settings. The Edit Mesh Device Settings depend on the device

group AP model: Wi-Fi 6 access points: AP3xx, AP4xx, and AP5xx, or AP39xx.

Note

Conﬁguration parameters you set from the conﬁguration Proﬁle Mesh Points tab apply to all

APs in a device group. To override settings for a speciﬁc AP, see the AP Advanced Overrides.

For more information, see the Extreme Campus Controller User Guide.

1. On the Proﬁle Mesh Points tab, select a mesh network from the AP radio drop-down list.

Note

The access points are limited to one mesh point. Multiple radios can be conﬁgured for a

single mesh point.

2. Select Advanced.

The Edit Mesh Device Settings dialog opens.

3. Conﬁgure the following settings:

Table 8: Mesh Device Settings

AP Model Option AP Behavior

• AP3xx

• AP4xx

• AP5xx

Root

Note: Wi-Fi 6 access points:

AP3xx, AP4xx, and AP5xx can

be part of the same mesh

network, but they cannot

participate in a mesh network

with AP39xx. AP39xx access

points must be a separate mesh

network from the Wi-Fi 6 APs.

A root mesh point is deﬁned as a mesh point that

is connected to the WAN and provides a wired

backhaul to the network. Select the root behavior

of this mesh point.

• Yes — Mesh point is root node for this mesh

network.

• No — Mesh point is not a root node for this

mesh network. (Additional settings display.)

• AP3xx

• AP4xx

• AP5xx

Monitor Primary Port Link (Available for root APs) With Monitor Primary Port

Link enabled, if a root AP loses connection to the

backhaul, the non-root APs scan for a new root AP

and the original root performs service as a non-

root AP. When the original root AP restores

connectivity, it resumes the role of root AP.

Through the use of Automatic Channel Selection

(ACS), the optimum path is restored.

• AP3xx

• AP4xx

• AP5xx

Preferred Neighbor (Available for non-root APs) Select the preferred

Neighbor (AP name and radio) from a list of APs

with a root or non-root mesh radio.

When a non-root AP can see mesh beacons from

more than one neighbor, this setting conﬁgures

the AP to prefer one beacon over all others when

choosing a path back to the root.

• AP3xx

• AP4xx

• AP5xx

Preferred Root (Available for non-root APs) Select the preferred

root AP from a list of APs with a root mesh radio.

Use this setting to balance the number of mesh

points reporting to a speciﬁc root AP.

Edit Mesh Device Settings Deploying a Mesh Network

74 Extreme Campus Controller Deployment Guide for version 5.46.03