Extreme Networks Summit WM3000 Series - Page 453

Summit WM3000 Series Controller System Reference Guide 453
6 Click on OK to complete the addition of the Radius Server.
7 Click Cancel to revert back to the last saved configuration without saving any of your changes.
External Radius Server Settings
When using an external Radius Server with the controller, ensure the following values are configured
on your server to ensure maximum compatibility with the controller.
Vendor ID. Radius VSAs. There are two radius VSAs used for management user authentication.
Vendor ID The Extreme Networks vendor ID is 1916.
VSA Name Attribute Number Type Values
ExtremeNetworks-
Service-Type
1 Integer (Decimal) • Monitor Role - Value is 1.
(read-only access to the controller)
•
Helpdesk Role - Value is 2
(helpdesk/support access to the
controller)
•
Nwadmin Role - Value is 4
(all wired and wireless access to
the controller)
•
Sysadmin Role - Value is 8.
(System administrator access)
•
WebAdmin Role - Value is 16
(Guest user application access)
•
Superuser Role - Value is 32768
(grants full read/write access to
the controller)
To configure multiple roles, this value
can be configured multiple times with
different values for each role.
ExtremeNetworks-
Login-Service
100 Integer (Decimal) • Console Access - Value is 128
(user is allowed to login only from
console)
•
Telnet Access - Value is 64
(use is allowed to login only from
telnet session)
•
SSH Access - Value is 32
(user is allowed to login only from
ssh session )
•
Web Access - Value is 16
(user is allowed to login only from
web/applet)
To configure multiple access
methods, this value can be set
multiple times with different access
values, or the desired values can be
added together and and entered as a
single entry.