topic Re: Radius configuration for extreme in ExtremeSwitching (EXOS/Switch Engine)

Radius configuration for extreme

NN_QA — Wed, 31 May 2023 09:23:12 GMT

hi,

I want to configure radius client on extreme switch,

below command i used for configuration

configure radius netlogin primary server 192.168.X.X 1812 client-ip 192.168.x.x vr VR-Default

configure radius netlogin primary shared-secret enrypted

enable radius

but when i am looking for radius statistics switch not senting any request to the server.

Re: Radius configuration for extreme

schuert — Wed, 31 May 2023 12:39:57 GMT

This is what I'm using to authenticate Clients (NAC) against an Aruba Clearpass and assign a VLAN depending on the radius response:

configure radius netlogin primary server x.x.x.x 1812 client-ip x.x.x.x vr VR-Default
configure radius netlogin primary shared-secret encrypted "XXXX"
configure radius dynamic-authorization 1 server x.x.x.x client-ip x.x.x.x vr VR-Default shared-secret encrypted "XXXX"
enable radius
disable radius mgmt-access
enable radius netlogin
enable radius dynamic-authorization

Ports that should authenticate connected clients need to have netlogin enabled:

enable netlogin port X dot1x mac

Re: Radius configuration for extreme

OscarK — Wed, 31 May 2023 12:44:14 GMT

if you want to authenticate CLI logins you need to configure radius mgt-access instead of netlogin.

Re: Radius configuration for extreme

NN_QA — Sun, 04 Jun 2023 07:36:38 GMT

enable radius dynamic-authorization

enable netlogin port X dot1x mac.
These two commands are not supporting in the switch