Specifications
WWW.EXTREMENETWORKS.COM
3
Product Specifications
Management Features
• Role-based Access Control (RBAC)
• Per User
• Per Switch
• Per VLAN
• Per Client
• Per Client Category
• Per Device Type
• Per Time
• Per Location
• Object based configuration management
• Define roles, domains, authentication sources, switches and
WLANs, and connection profiles easily
• Automated checkup and fix permissions tasks
• Accounting based on several criteria
• Node, switch groups, user, role, OS, source, realm, SSID, profile,
and domain
• Violations, failures, successes, registration type, and state
Guest, BYOD and IoT Management
• Customizable Captive Web Portal
• Wireless ISP Roaming (WISPR), Eduroam,
and Hotspot 2.0
• Supports billable hotspots
• Billing and service tiers
• Payment processing through Paypal, Mirapay, Authorize.net,
Stripe
• Guest Access Self Registration
• With or without credentials
• Self-registration with Social login
• User device registration
• Employee sponsorship
• Email Validation
• SMS Validation
• Password-of-the-day
• "Device profile” or “device fingerprint” based onboarding
Authentication
• EAP Protocols
• EAP-FAST, EAP-PEAP, EAP-TTLS, EAP-TLS, PAP, CHAP,
MSCHAPv1 and 2, EAP-MD5
• 802.1X Support
• RADIUS to AD/LDAP server support for 802.1X
authentication
• 802.1X (PEAP) or Certificate (TLS) BYOD automated
onboarding
• User Authentication Portal (AD/LDAP)
• PKI with EAP EAP-TLS, EAP-TTLS, EAP-LEAP, EAP-
PEAPv0, EAP-PEAPv1, EAP-MSCHAPv2
• Authentication Types
• LDAP
• Microsoft Active Directory
• Novell eDirectory
• OpenLDAP
• Any LDAP-compliant services
Authentication (cont.)
• Authentication Types (cont.)
• RADIUS
• Cisco ACS
• RADIUS (FreeRADIUS, Radiator, etc.)
• Microsoft NPS
• Any RADIUS-compliant services
• Local user file (Apache httpasswd format)
• OAuth2
• Facebook
• Google
• GitHub
• LinkedIn
• Microsoft Live
• Twitter
• SAML
• Additional built-in SQL DB for User store for deployments
without LDAP
Secure Provisioning
• Android
• Windows
• APIs for all Apple devices
Network Access Control
• Realtime security policy assessment (posture assessment) and
notification for multiple OS
• Gradual Deployment
• Pre-registration
• Per location/switch/port deployments
• Automated Device Registration
• By network device
• By device fingerprinting
• By MAC address vendor
• Integrates with third party solutions to extend device
registration capabilities
• Snort, Nessus, OpenVAS, Browser User-Agent and more
• VLAN isolation and quarantining (See supported switches
below)
• Netflow / IPFIX
• Bandwidth accounting
• Floating device support
• Switches and APs
Profiling
• Functionality
• Profiling of devices / IoT device recognition
• Group based policies for network devices
• Device visibility and identification
• Device Fingerprinting
• World’s largest device fingerprinting database
• DHCP v4 & v6
• User Agent
• MAC address Patterns
• OUI
• TCP fingerprints
• Behavioral analysis