Setting Up The 802.1X Components; Setting Up The Radius Server; Using The Sentriant Ag Ias Plug-In To The Microsoft Ias Radius Server - Extreme Networks AG200 User Manual

802.1X Quarantine Method

Setting up the 802.1X Components

In order to use Sentriant AG in an 802.1X environment, Extreme Networks, Inc. recommends
configuring your environment first, then installing and configuring Sentriant AG.
This section provides instructions for the following:
"Setting up the RADIUS Server" on page 232
●
"Enabling Sentriant AG for 802.1X" on page 261
●
"Setting up the Supplicant" on page 262
●
"Setting up the Authenticator" on page 265
●

Setting up the RADIUS Server

Switches support 802.1X authentication by authenticating against a RADIUS server. The Sentriant AG
802.1X solution must be integrated with the RADIUS authentication to "intervene" in the authentication
process, test endpoints, and assign them to the appropriate VLAN. Sentriant AG can be deployed and
integrated with RADIUS in the following three ways:
Install the Sentriant AG Plug-in to the Microsoft® IAS RADIUS server (see "This section provides
●
instructions for how to install the Microsoft IAS to the Sentriant AG IAS plug-in." on page 232).
Proxy requests from the built-in Sentriant AG RADIUS server to any other RADIUS server (see
●
"Proxying RADIUS Requests to an Existing RADIUS Server Using the Built-in Sentriant AG RADIUS
Server" on page 258).
Use the built-in Sentriant AG RADIUS server for authentication (see "Enabling Sentriant AG for
●
802.1X" on page 261).
Any of these solutions can be customized to work with your existing LDAP or Active Directory user
databases. This section provides instructions of configuring these three options.

Using the Sentriant AG IAS Plug-in to the Microsoft IAS RADIUS Server

This section provides instructions for how to install the Microsoft IAS to the Sentriant AG IAS plug-in.
NOTE
For an explanation of how the components communicate, see "Sentriant AG and 802.1X" on page 228.
Microsoft® Windows Server™ 2003 Internet Authentication Service (IAS) is Microsoft's implementation
of a Remote Authentication Dial-In User Service (RADIUS) server. This section provides instructions on
configuring this server to use with Sentriant AG.
For details on the Windows Server 2003 IAS, refer to the following link:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/ias.mspx
232
Sentriant AG Users' Guide, Version 5.0