Version 3.1 SP2 Reference Guide - Extreme Networks

FConfiguringAPPENDIXRADIUS forRidgeline AuthenticationThis appendix describes in detail how to set up an external RADIUS server to provide authenticationservices for Ridgeline users when Ridgeline is configured to act as a RADIUS client.It describes the following steps:● “Step 1. Create an Active Directory User Group for Ridgeline Users” on page 721● “Step 2. Associate Users with the Ridgeline Group” on page 722● “Step 3. Enable Ridgeline as a RADIUS Client” on page 725● “Step 4. Create a Remote Access Policy for Ridgeline Users” on page 726● “Step 5. Edit the Remote Access Policy to add a VSA” on page 731● “Step 6. Configure Ridgeline as a RADIUS Client” on page 736External RADIUS Server SetupThe following example is a step-by-step walk-through example using Microsoft Active Directory andInternet Authentication Service. This example also leads you through the process of setting up a VSAfor passing role information.Step 1. Create an Active Directory User Group for Ridgeline UsersWithin Active Directory, create one or more User Groups. If you have multiple roles within Ridgeline,and you want to authenticate users for any of those roles, you will need a Group for each Ridgelinerole.Ridgeline Reference Guide721