Concierge Desk
FAQs

Create topic
Login

ExtremeControl

A place for questions and discussions regarding the ExtremeControl (NAC) platform

18 Topics
111 Replies

When you subscribe we will email you when there is a new topic in this category

18 Topics

Most views

Recently active Most replies Newest first

Extreme Control printers losing connection, state "The session is no longer active due to: User-Request."

Hi,I am facing some strange thing.using MAC authentication on a ERS4900 switch for a Canon printer, the printer is losing connections after a while and the state description in XMC Control is “The session is no longer active due to: User-Request.”what can cause this and how to avoid it? kind regards...

Naming FA created VLANs

Hello,Is it possible to somehow choose the name of VLANs that are dynmically assigned by Control? I am using FA and control to assign the VLANs and the VLAN will always be named SYS_VLAN_Number. If I am using different VLANs for voice per stack, I would like those to be named VOICE on the stack, so...

Extreme Control Machine + User authentication fails

Hi,This Topic is a a follow up to Although, I hopefully configured everything as advised and discussed in above thread, Machine + User authentication fails. (Machine auth ONLY works fine, now!)Below is a screenshot of the EvaluationTool result: I don´t see the mistake….

NAC (ExtremeControl) - Don't see End-Systems Connected on my ERS Switch

Hello every one, I tried to setup Extreme Control on my XMC in order to see what’s connected on our network.The NAC appliance has been added to my XMC.My Switch (ERS4900 Series) has been added in “Switches” on Access Control Tab. There are two IP Phones connected on the port 1 and 2 but I don’t see...

EXOS | Extreme Control dynamic vlan assignment

Hi Hub Community, We’re using the Extreme Control Policy (NAC) in one of our customers in the health care system to implement some security checks, regarding the devices that can connect to our network. In resume, in our EXOS stacks we have all the ports with the DATA vlan (untag) and VoIP vlan (tag...

checking ldap user and radius attribute on NAC Authentication

Hi,I’m currently on a migration process from Microsoft NPS to Extreme Control.We have a Cisco ASA as VPN-Gateway.I will authenticate VPN-Users and Mgmt-Logins.In the past we separate this with different “called-station-id” values.Can I realize this with NAC? AFAIK I can’t check/match LDAP-Criteria (...

Update Certificate

Hi anybody,I have an external applied radius certificate and the EMC radius certificate is empty.Is the following procedure all I need to do?cd /opt/nac/radius/raddb/certsrm external_server.pemrm external_server.keystorenacctl restartWhat are the risk during this procedure? BR Bernd

End Systems MACs collection

I wonder what is your method to bring all end systems MAC addresses to XMC database? Do you just have EAP enabled on every port? I am asking because I want to have this data in XMC for visibility, but I also want to avoid having the NAC dependency in some areas of the network.

MGMT Authentication - Switch and NAC

Good Afternoon,I have 1 XMC+NAC+X440G2I want to use NAC as radius to authenticate Windows User ( on LDAP/NPS 2012 ) to connect to Switches on SSH.Thanks in advanceGiuseppe

NAC / Control Rule List is incomplete in WEB GUI

Hello,I’ve a confusing issue in Extreme Control Web GUI at a customer instrallation.I can’t see all NAC Rules.I can scroll down, but the bottom of scroll-area is not the real end of rule list.The visible part of list is flexible. It depends on Screen-Resolution and size of the rule-frame.Issue is on...

XMC Control monitor-only mode for Trial

We’re far away from defining the Policy and Authentication parts of a design.Have deployed a Trial of XMC, Analytics, FabricManager and Control v8.5.2.6 in a VSP/ERS Campus Fabric environment.We want to enable Control to gain visibility of connected wired devices, but NOT interfere with their opera...

Full name in end-system vieuw Access Controle

in our NAC environment I see in the End-system tab by the user name Domain\user. Is it posible to see there is the full name ?

MAC to IP resolution approach for static addresses

I see three options:Use the MAC to IP Mapping listFor us this is not maintainable and we don’t have a source with MACtoIP informations which would allow some automated imports. IP Discovery on Network Access SwitchI think Control uses the nodealias MIB to pull this information via SNMP. There’s no s...

Authenticated registration: remove MAC when user leaves company

Hi all, We are planning to set up authenticated registration for BYOD devices. Users will log in on the portal using their LDAP credentials to register the MAC addresses of their BYOD device(s).As far as I know, registering a device actually adds it’s MAC address to a pre-defined End-System Groups.W...

Agent based Assessment

Hi, i have a question to agentbased Assessment.Is the agentbased assessment a legacy method of doing assessment?So if somebody want to introduce assessment on the network, does it make sense to start with agentbased assessment or what are the plans of extreme?Maybe this feature is discontinued? Gree...

Does Extreme Control support EAP-TLS based OpenVPN Client Authentication ?

A customer ask if it would be possible to authenticate VPN clients of a OpenVPN Server against Extreme Control. We use XMC / NAC V8.5.x.Does anybody try this before ? If i google for the core components - FreeRADIUS and OpenVPN - it seems possible Thanks.

Authenticate XIQ managed Access Points with ExtremeControl

Hi, I have a very basic question.Can I use the ExtremeControl for authenticate wireless clients via 802.1x on Access Points that are managed over the ExtremeCloud IQ?Do you have any documents or How-Tos? Thanks a lot! Regards,Max

Extreme Control Enfrocement

Hi All,Added a few new switches to Extreme Control.I enforce after adding and then enforce after the auth/radius tool.I unable to do the latter at the moment because the first enforce is still “Audit in Progress”Doesnt give me any info on what the delay is, has to be +20 minutes as of writing this p...

User Leaderboard

Tweets by ExtremeNetworks

Powered by inSided

Sign up

Already have an account? Login

Login with your Extreme Portal account

or

Username *

E-mail address *

Real Name

(Private)

Only you and moderators can see this information

Company

(Private)

Only you and moderators can see this information

Role

(Private)

Only you and moderators can see this information

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Login with your Extreme Portal account

or

Username

Password

Remember me

Forgot password?

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK