ExtremeControl

  • 1.  ExtremeControl - put Clients to Quarantine after long absence

    Posted 07-15-2021 11:57

    Hello,

    we have one customer that does 802.1x Authentication (EAP-TLS) in his networks using ExtremeControl and Summit switches. Everything is working fine so far.
    He has the request that clients that have been out of the office (aka not seen in NAC) for longer than 14 days are put into quarantine even though they have a corect cert on their machine. 

    Basically: I need to find a way to put these computers into a NAC end-system group automatically.

    Do you guys think that there is a way to do achieve this? I’m not very firm with Extreme API. 
    Do you maybe have even simplier ideas on how to set this up (or something similar)?

    Thanks and best regards
    Stefan



  • 2.  RE: ExtremeControl - put Clients to Quarantine after long absence

    Posted 07-15-2021 12:00

    Hi Stefan,

    If you aren’t ok with the API’s, you could look at the NAC request tool to script this.

    Mig



  • 3.  RE: ExtremeControl - put Clients to Quarantine after long absence

    Posted 07-15-2021 12:15

    Hi,

    I think the API is the best way.

    But for the sake of completeness you could of course also use the "Age End-Systems Older Than" and delete the client from groups after 14 days (but not add it to a group as you wish). (The settings can be found under Administration->Options->Access Control->Data Persistence).



  • 4.  RE: ExtremeControl - put Clients to Quarantine after long absence

    Posted 07-15-2021 12:34

    Will take a look at this!

    Ah, so this would be like the other way round… Sounds quick and dirty. Will definitely keep this in mind.

    Thank you guys for your first input! :-)