User guide

Using Network Login

Summit24e3 Switch Installation and User Guide 63

• A DHCP server

• A RADIUS server configuration

The RADIUS server must have the following options configured in its dictionary file for network

Extreme. attr Extreme-Netlogin-Vlan 203 string (1, 0, ENCAPS)

The following optional configuration parameters can also be specified:

Extreme .attrExtreme-Netlogin-Url 204 string (1, 0, ENCAPS)

Extreme.attr Extreme-Netlogin-Url-Desc 205 string (1, 0, ENCAPS)

NOTE

These settings are for the Merit 3.6 version of RADIUS. The syntax of these settings will vary based

on the type of RADIUS server that you are using.

The RADIUS server must also contain entries in the user file for a permanent VLAN, the URL to be

redirected to after authentication has taken place, and the description of that URL. For example:

auto Authentication-Type = Unix-PW, Service-Type = login

Filter-Id = "unlim"

Extreme:Extreme-Netlogin-Vlan = "corp"

Extreme:Extreme-Netlogin-Url = "http://192.207.37.16"

Extreme:Extreme-Netlogin-Url-Desc = "Extreme Networks Home"

In this example, the username is auto, the permanent VLAN is corp, and the URL to be redirected to

is the Extreme Networks home page http://192.207.37.16.

Configuring Campus Mode

To configure the switch to use network login in campus mode, follow these steps:

1 Configure the switch as a RADIUS client. See “RADIUS Client” on page 56.

2 Configure a DHCP range for the port or ports in the VLAN on which you want to enable network

config vlan <name> dhcp-address-range <ipaddress1> - <ipaddress2>

The switch will assign a temporary DHCP address within the DHCP range to the client.

3 Enable network login on the port, using the command:

enable netlogin ports <portlist> vlan <name>

NOTE

Network login is used on a per port, per VLAN basis. A port that is tagged can belong to more than

one VLAN. In this case, network login can be enabled on one port for each VLAN.

Example Configuration Using Campus Mode

This example creates a permanent VLAN named corp on the switch. This VLAN will be used for

authentication through a RADIUS server. The RADIUS server is 10.201.26.243 and the IP address of the

switch is 10.201.26.11. The secret is “secret”. A temporary VLAN named temporary is created and port 9

is added. Network login is enabled on the port.

create vlan corp