Extreme Networks Summit WM3000 Series Reference Manual page 134

Network Setup
NOTE
If using the controller's local Radius Server for user authentication instead of an external primary or secondary
Radius Server, see
easy setup option and offers a high degree of security and accountability.
The controller ships with a default configuration defining the local Radius Server as the primary
authentication source (default users are admin with superuser privileges and operator with monitor
privileges). No secondary authentication source is specified. However, Extreme Networks recommends
using an external Radius Server as the primary user authentication source and the local controller
Radius Server as the secondary user authentication source. To use an external Radius Server as either a
primary or secondary authentication source, it must be specified appropriately.
To configure an external Radius Server for EAP 802.1x, Hotspot or Dynamic MAC ACL WLAN support:
NOTE
To optimally use an external Radius Server with the controller, Extreme Networks recommends defining specific
external Server attributes to best utilize user privilege values for specific controller permissions. For information on
defining the external Radius Server configuration, see
Support" on page
1 Select Network > Wireless LANs from the main menu tree.
2 Select an existing WLAN from those displayed within the Configuration tab.
3 Click the Edit button.
4 Select either the EAP 802.1x, Hotspot or Dynamic MAC ACL button from within the Authentication
field. This enables the Radius Config... button at the bottom of the Network > Wireless LANs > Edit
screen.
5 Select the Radius Config... button. The Radius Configuration screen displays for defining an external
Radius or NAC Server.
134
"Configuring the Radius Server" on page
137.
396. The controller's local Radius Server provides an
"Configuring an External Radius Server for Optimal Controller
Summit WM3000 Series Controller System Reference Guide