User's Manual

226 | Authentication Servers Dell Networking W-Series ArubaOS 6.4.x| User Guide
the list is used. You can configure servers of different types in one group. For example, you can include the
internal database as a backup to a RADIUS server.
Figure 28 graphically represents a server group named Radii” that consists of two RADIUS servers, Radius-1
and Radius-2. The server group is assigned to the server group for 802.1x authentication.
Figure 28 Server Group
Server names are unique. You can configure the same server in multiple server groups. You must configure the
server before you can add it to a server group.
If you use the controller’s internal database for user authentication, use the predefined “Internal” server group.
You can also include conditions for server-derived user roles or VLANs in the server group configuration. The
server derivation rules apply to all servers in the group.
Configuring Authentication Servers
This section describes how to configure RADIUS, LDAP, TACACS+ and Windows external authentication servers
and the internal database on the controller.
This section includes the following information:
l Configuring a RADIUS Server on page 226
l Configuring an RFC-3576 RADIUS Server on page 232
l Configuring an LDAP Server on page 232
l Configuring a TACACS+ Server on page 234
l Configuring a Windows Server on page 235
Configuring a RADIUS Server
Follow the procedures below to configure a RADIUS server using the WebUIor CLI.
Using the WebUI
1. Navigate to the Configuration > Security > Authentication > Servers page.