Step 3 - Define Authentication By Captive Portal And Rad Policy For The Third-Party Ap Wm-Ad; Step 4 - Define Filtering Rules For The Third-Party Aps - Extreme Networks Summit WM User Manual

Step 3 - Define authentication by Captive Portal and RAD policy
for the third-party AP WM-AD
1 Click the Auth & Acct tab.
2 In the Authentication Configuration page, click Configure Captive Portal Settings.
3 In the Captive Portal Settings page, define the Captive Portal configuration.
4 Click the RAD Policy tab.
5 Define the filter IDs to match those in RADIUS server.

Step 4 - Define filtering rules for the third-party APs

1 Because the third-party APs are mapped to a physical port, you must define the Exception filters on
the physical port, using the Port Exception Filters page. For more information, see
filtering rules for a WM-AD" on page
2 Define filtering rules that allow access to other services and protocols on the network such as HTTP,
FTP, Telnet, SNMP.
In addition, modify the following functions on the third-party access point:
Disable the access point's DHCP server, so that the IP address assignment for any wireless device on
the AP is from the DHCP server at the Summit WM Controller with WM-AD information.
Disable the third-party access point's layer-3 IP routing capability and set the access point to work as
a layer-2 bridge.
Here are the differences between third-party access points and Wireless APs on the Summit WM
Controller, Access Points, and WM software system:
A third-party access point exchanges data with the Summit WM Controller's data port using
standard IP over Ethernet protocol. The third-party access points do not support the tunnelling
protocol for encapsulation.
For third-party access points, the WM-AD is mapped to the physical data port and this is the default
gateway for mobile units supported by the third-party access points.
A Summit WM Controller cannot directly control or manage the configuration of a third-party access
point.
Third-party access points are required to broadcast an SSID unique to their segment. This SSID
cannot be used by any other WM-AD.
Roaming from third-party access points to Wireless APs and vice versa is not supported.
Summit WM User Guide, Software Version 5.3
181.
"Configuring
261