Extreme Networks Summit WM Getting Started Manual page 99

NOTE
To set-up the RADIUS server for MAC-based authentication, you must set up a user account with User ID=MAC and
Password= MAC or a password defined by the administrator for each user.
To define MAC-based authentication for a WM-AD:
1 From the main menu, click WM-AD Configuration. The WM-AD Configuration is displayed.
2 In the left pane, select the SSID WM-AD for which you want to configure the authentication
mechanism. The Topology tab is displayed.
3 Click the Auth & Acct tab. The Auth & Acct text boxes are displayed in the right pane.
The Auth & Acct tab offers you the following thee options:
Auth – Defines the authentication servers.
●
MAC – Defines the servers for MAC-based authentication.
●
Acct – Defines the accounting servers.
●
4 Click MAC. The MAC text boxes are displayed.
5 From the RADIUS drop-down list, click the server that you want to use for MAC authentication and
then click Use. The selected server is displayed in the list of Config'd Servers and a red asterisk is
displayed next to Auth, indicating that the server has been assigned.
NOTE
The RADIUS drop-down list reflects the servers that are defined on the Global Settings screen. For more
information, see the Summit WM User Guide.
Use the Up and Down buttons to prioritize the servers for redundancy. The servers are prioritized in
the sequence they are displayed in the list of Config'd Servers. You can change the sequence by
selecting the server and then clicking on the Up and Down buttons.
6 If applicable, to use a server that has already been used for another type of authentication or
accounting, click the server you want to use for MAC authentication, and then select Use server for
MAC Authentication.
7 Type the appropriate values in the MAC text boxes.
Port – Used to access the RADIUS server. The default is 1812.
●
# of Retries – Number of times the Summit WM Controller will attempt to access the RADIUS
●
server.
Timeout – Maximum time for which Summit WM Controller will wait for a response from the
●
RADIUS server before making a re-attempt.
NAS Identifier – RADIUS attribute that identifies the server responsible for passing information
●
to the designated servers and then acting on the response returned. This is an optional text box.
Auth Type – Authentication protocol to be used by the RADIUS server to authenticate the
●
wireless device users. The four options are:
AP – Password authentication protocol
■
CHAP – Challenge handshake authentication protocol
■
MS-CHAP – Windows-specific version of CHAP
■
MS-CHAP v2– Windows-specific version of Chap (Version 2)
■
Set as primary server – Select to configure the RADIUS server as the primary server.
●
Summit WM Getting Started Guide, Software Version 5.1
99