Extreme Networks Summit WM20 User Manual page 112

WM Access Domain Services Configuration
11 In the Include VSA Attributes section, click the appropriate checkboxes to include the Vendor
Specific Attributes in the message to the RADIUS server:
AP's
●
WM-AD's
●
SSID
●
The Vendor Specific Attributes must be defined on the RADIUS server.
12 If appropriate, click the Reset to Primary checkbox. This checkbox is visible when a RADIUS server
has not yet been selected as a primary server, or if the server you are configuring has already been
selected as the primary server, the Reset to Primary checkbox is selected.
RADIUS redundancy defines additional backup RADIUS servers that the system will attempt to
communicate with in case a connection with the identified primary server fails. If connection to an
active primary server fails, the system automatically attempts to connect to one of the alternate
servers in sequence. If the system succeeds in registering with a defined alternate server, it becomes
the active primary server, which is identified by the A on the list. You can subsequently reset or
change the identification of the primary server by clicking the applicable Reset to Primary checkbox.
13 To save your changes, click Save.
NOTE
If you have already assigned a server to either MAC-based authentication or accounting, and you want to use it
again for authentication, highlight its name in the list next to the Up and Down buttons and select the Use server
for Authentication checkbox. The server's default information is displayed.
Defining the RADIUS Server Priority for RADIUS Redundancy
If more than one server has been defined for any type of authentication, you can define the priority of
the servers in the case of failover.
In the event of a failover of the main RADIUS server—if there is no response after the set number of
retries—then the other servers in the list will be polled on a round-robin basis until a server responds.
If one of the other servers becomes the active server during a failover, when the new active server
properties are displayed the Set as primary server checkbox is selected.
If all defined RADIUS servers fail to respond, a critical message is generated in the logs.
To define the RADIUS server priority for RADIUS redundancy:
1 From the main menu, click WM-AD Configuration. The WM-AD Configuration screen is
displayed.
2 In the left pane WM Access Domains list, click the WM-AD you want to define the RADIUS server
priority for. The Topology tab is displayed.
3 Click the Auth & Acct tab.
4 From the drop-down list, select the servers group you want to prioritize:
Configured Servers
●
Authentication Servers
●
MAC Servers
●
Accounting Servers
●
112
Summit WM20 User Guide, Software Release 4.2