Deployment Guide

Configuring an External NAC Server for
MBA and AAA Authentication
Deployment Strategy on page 77
Configuring the External NAC Server on page 78
Network with Default Auth Role on page 80
Network with Pass-Through External RADIUS on page 83
Deployment Strategy
The following deployment strategy uses an external NAC (Network Access Control) server to
authenticate client sessions using MBA and AAA authentication methods. We will configure the “Use
Default Auth” and the “Pass Through External RADIUS” Accept Policy actions upon successful user
authentications.
For this strategy we are using the following:
• One of the following ExtremeWireless™ access points:
◦ AP302W
◦ AP305C/CX
◦ AP310i/e
◦ AP310i-1
◦ AP360i/e
◦ AP4000
◦ AP410i/e
◦ AP410i-1
◦ AP410C
◦ AP460i/e
◦ AP460C/S6C/S12C
◦ AP505i
◦ AP510i/e
◦ AP510i-1
◦ AP560i/h
◦ AP3917i/e/k
◦ AP3916ic
◦ AP3915i/e
◦ AP3912i
Extreme Campus Controller Deployment Guide for version 5.46.03
77