AAA Configurations Panel


The AAA Configurations panel provides a list of your AAA configurations and buttons to add, edit, or delete configurations. AAA configurations define the RADIUS and LDAP and Entra ID configurations that provide the authentication and authorization services to your ExtremeControl engines.

Access the ExtremeControl Configurations panel in the Control > ExtremeControl tab by expanding the ExtremeControl Configurations tree in the left-panel and expanding the AAA Configurations tree. Your configurations are listed within the tree.

The following configurations are available in the left-panel tree:

LDAP Configurations
This panel lets you view and define the LDAP configurations used in ExtremeCloud IQ Site Engine. Any changes made are written immediately to the ExtremeCloud IQ Site Engine database. For more information about LDAP Configuration, visit the Manage LDAP Configuration topic.
Local Password Repository
The local password repository specified for this AAA configuration. ExtremeCloud IQ Site Engine supplies a default repository that can be used to define passwords for administrators and sponsors accessing the Registration administration web page and the sponsor administration web page. The default password is Extreme@pp.


Use these buttons to add, edit, or delete local repository in the table. Select the Add button to open the Add User window, where you can define a new user and password for the Repository. Select the Edit button to open the Edit User, window where you can edit the selected user entry. Use the Delete button to delete the selected user entry. You cannot delete a user that is referenced by an Administrative Login Configuration (as configured in the Edit Portal Configuration Window > Administration).

The following columns are displayed in the default Local Password Repository table:

Enabled
Displays whether the user is enabled or disabled. If a user is disabled, they are not able to log in. This feature is useful if you want to enable a user only at certain times, such as when they are on-site. You can enable or disable a user by editing the user entry (select the entry and select the Edit button).
First Name
The user's first name (for administrative information only).
Last Name
The user's last name (for administrative information only).
Display Name
The display name is used on the voucher for pre-registration in the captive portal.
Username
The user's login user name.
Repository
The name of the Local Password Repository of which the user is a member.
GIM
Indicates if the local repository is used by the Guest and IoT Manager (GIM).
Description
A description of the repository.
RADIUS Servers
This panel lets you view and define the RADIUS servers used in ExtremeCloud IQ Site Engine. RADIUS servers can be used in ExtremeCloud IQ Site Engine server authentication configurations and in ExtremeControl AAA configurations. For more information about RADIUS Servers, visit the Manage RADIUS Server topic.
Entra IDs
This panel lets you view and define the Entra ID (formerly Azure AD) used in Authentication Rules. For more information about Entra ID configurations, visit the Manage Entra IDs topic.

For information on related help topics: