Extreme Networks Summit WM3000 Series Reference Manual page 136

Network Setup
RADIUS Server
Address
RADIUS Port
RADIUS Shared
Secret
Server Timeout
Server Retries
Dynamic
Authorization
NOTE
The Radius or NAC server's Timeout and Retries should be less than what is defined for an MU's timeout and
retries. If the MU's time is less than the server's, a fall back to the secondary server will not work.
7 Refer to the Accounting field and define the following credentials for a primary and secondary
Radius Server.
Accounting Server
Address
Accounting Port
Accounting Shared
Secret
Accounting Timeout
Accounting Retries
Accounting Mode
8 Select the Re-authentication checkbox to force a periodic re-authentication with the Radius server.
Periodic repetition of the authentication process provides ongoing security for currently authorized
connections. Define an interval between 30 and 65535 seconds.
9 Refer to the Advanced field to define the authentication protocol used with the Radius Server.
PAP
CHAP
136
Enter the IP address of the primary and secondary server acting as the
Radius user authentication data source.
Enter the TCP/IP port number for the primary and secondary server acting
as the Radius user authentication data source. The default port is 1812.
Provide a shared secret (password) for user credential authentication with
the primary or secondary Radius server.
Enter a value (between 1 and 300 seconds) to indicate the number of
elapsed seconds causing the controller to time out on a request to the
primary or secondary server.
Enter a value between 1 and 100 to indicate the number of times the
controller attempts to reach the primary or secondary Radius server before
giving up.
Authorization amongst the Radius servers is conducted dynamically as
they connect and disconnect periodically.
Enter the IP address of the primary and secondary server acting as the
Radius accounting server.
Enter the TCP/IP port number for the primary and secondary server acting
as the Radius accounting data source. The default port is 1813.
Provide a shared secret (password) for user credential authentication with
the primary or secondary Radius accounting server.
Enter a value (between 1 and 300 seconds) to indicate the number of
elapsed seconds causing the controller to time out a request to the
primary or secondary accounting server.
Enter a value between 1 and 100 to indicate the number of times the
controller attempts to reach the primary or secondary Radius accounting
server before giving up.
Use the Accounting Mode drop-down menu to define the accounting
Start-Stop Stop Only
mode as either ,
Interval
(in seconds) used with the selected accounting mode.
Password Authentication Protocol
PAP -
over a network to a server that compares the username and password to a
table of authorized users. If the username and password are matched in
the table, server access is authorized.
CHAP is an encrypted authentication method based on Microsoft's
challenge/response authentication protocol.
Start-Interim-Stop
or . Define the
sends a username and password
Summit WM3000 Series Controller System Reference Guide