Extreme Networks Summit WM3000 Series, Справочное руководство

Страница: 400 / 513

Controller Security
Summit WM3000 Series Controller System Reference Guide
400
3 Click the Start the RADIUS server link to use the controller’s own Radius server to authenticate users
accessing the controller managed network. Again, this is recommended as the secondary means of
authenticating users.
4 Set a Timeout interval (between 5 and 10 seconds) to define how long the controller waits for a reply
to a Radius request before retransmitting the request. The default value is 5.
Ensure the value is set long enough to compensate for the heaviest periods of data traffic within the
controller managed network.
5 Set a Retires value (between 3and 6) to define the number of times the controller transmits each
Radius request to the server before giving up. The default value is 3.
6 Click the Apply button to save the changes made to within the Global Settings field.
7 Click the Revert button to cancel any changes made within the Global Settings field and revert back
to the last saved configuration.
NOTE
The appearance of the bottom portion of the Configuration tab differs depending on whether Clients or Proxy
Servers is selected. Select the Clients tab to display the IP Address and Subnet Mask of existing Radius clients.
Existing clients can be modified or new clients added. For more information, see “Radius Client Configuration”
on page 400 . Select the Proxy Servers tab to display the ID suffix, IP address and Port Number of existing
Radius proxy servers. Existing servers can be modified or new proxy servers added. For more information, see
“Radius Proxy Server Configuration” on page 401 .
Radius Client Configuration
A Radius client implements a client/server mechanism enabling the controller to communicate with a
central server to authenticate users and authorize access to the controller managed network. A Radius
client is often an embedded device since it alleviates the need to store detailed user information locally.
To configure Radius client support:
1 Select Security > Radius Server from the main menu.
2 Ensure the Configuration tab is selected.
3 Select the Clients tab from the bottom portion of the Configuration tab.
The Clients tab displays the IP address and subnet mask of existing Radius clients.
4 To edit an existing Radius client configuration, select it from the table and click the Edit button.
The Edit screen displays the Radius client’s existing IP address, subnet mask and shared secret
password used for credential verification. Modify these settings as required.
5 To remove an existing Radius client configuration from the table of configurations available to the
controller, select a configuration and click the
Delete button.
6 To create a new Radius client configuration, click the Add button at the bottom of the screen.