ExtremeCloud IQ- Site Engine & Extreme Management Center

Expand all | Collapse all

Configure RADIUS Authentication mode

Joseph Burnsworth

Joseph Burnsworth01-07-2016 15:09

  • 1.  Configure RADIUS Authentication mode

    Posted 01-07-2016 10:59
    Dear community members,
    I am trying to do radius user authentication from NetSight (6.3.0.168) with Microsoft NPS.
    User authentification fails, for NetSight uses PAP but CHAP is needed.
    Where can NetSight be configured for using CHAP instead of PAP ?


  • 2.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 11:03
    Do you like to authenticated wireless/wired clients or do you mean authenticate the client that access the Netsight GUI ?

    -Ron


  • 3.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 11:03
    I want to autheticate clients that can access the NetSight GUI.


  • 4.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 12:22
    You are right I get the same error.

    The help state the following...

    NOTE:The RADIUS Authentication mode supports PAP, CHAP, and MD5 authentication types.

    ... but I can't find an option to set it anywhere.

    Looks like we'd need someone from the Netsight team to answer that.

    -Ron


  • 5.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 14:15
    After looking around, it looks like you will need to make a new Advanced Radius configuration.



    In the new Config, you can choose your authentication type.



    Once you complete that, you go to "Authorization/Device access" and under "Users/Groups" you would choose your new Radius config under "Authentication Method"



    Let us know if this helps 🙂


  • 6.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 14:15
    Hi Joseph,
    I created new AAA configuration as proposed with authentication type MsCHAP and saved it..
    But when I go to "Authorization/Device access" and under "Users/Groups" I do not see newly created Radius config under "Authentication Method" to choose.
    What is wrong ?



  • 7.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 14:15
    Did you enforce your changes?


  • 8.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 14:15
    Sorry, there is nothing to enforce; I am not using a NAC appliance.
    I want to use Microsoft NPS a radius server.


  • 9.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 14:15
    You can always enable PAP for a specific connection request policy in NPS.


  • 10.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 14:15
    But thats not the problem;
    The user guide states:
    NOTE:The RADIUS Authentication mode supports PAP, CHAP, and MD5 authentication types.
    But CHAP is not working.



  • 11.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 14:15
    I think you'd need to open a GTAC ticket for this.

    I'm with you.... the NOTE should also tell that you'd only do it with a NAC license.

    -Ron


  • 12.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 14:58
    You mean the AAA-advanced config in the NAC Manager correct ?


  • 13.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 15:09
    yessir, sorry about that


  • 14.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 15:37
    Thanks a lot !!!

    So someone with only a base Netsight license can't configure it as they don't have access to the NAC manager because the app is unlicensed 🙂


  • 15.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 16:14
    As an alternate, you could use LDAP for this. I do believe that is is all versions. Please correct me if I am wrong on that


  • 16.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 16:14
    YES, LDAP is working, but this is not the solution for the problem.
    The user guide states:
    NOTE:The RADIUS Authentication mode supports PAP, CHAP, and MD5 authentication types.
    But CHAP is not working.



  • 17.  RE: Configure RADIUS Authentication mode

    Posted 01-07-2016 16:28
    LDAP works fine and I personaly have a NMS-U license so not a big deal for myself

    It's just weird that the function requires NAC manager to configure and I wonder whether is should be that way.