topic Re: Extreme Management Center in ExtremeCloud IQ- Site Engine Management Center

Extreme Management Center

Ahmed_101 — Fri, 28 Feb 2025 18:36:31 GMT

Hi. i'm practicing xmc in a lab that i have created. i have a problem when adding an exos switch to XMC (CLI Login Failed), i configured the snmp profile and cli credentials and i configured snmpv3 on the switch.
what is wrong ? did i miss some thing ?

any help will be appreciated.

Re: Extreme Management Center

Robert_Haynes — Sat, 01 Mar 2025 16:41:56 GMT

If the SNMP credential set is valid and SNMP is properly configured on the switch then the switch in inventory will show 'green' / online. The CLI credentials should also be valid for the switch with the correct option Telnet or SSH (preferably SSH) and SSH must also be separately enabled on the switch.

If you are using XMC (which is now end of life) and depending on what version - the SSH connection may fail to establish because the switch supports more modern ciphers/algorithms that the old XMC terminal client did not. If that's the case, switch to Telnet as a quick alternative.

Re: Extreme Management Center

Ahmed_101 — Sat, 01 Mar 2025 17:15:55 GMT

Thank you.

One more thing.
I want to configure 802.1X and MAC authentication for the users. and ldap configurations. Can you provide me with resources on how to do that? I got overwhelmed by searching on the internet.

Sorry if this is a silly thing to ask, but I'm just a student and new to xmc.

Re: Extreme Management Center

Ryan_Yacobucci — Sat, 01 Mar 2025 18:43:54 GMT

Hello,

We highly recommend an engagement with our professional services groups. There is a lot involved with this type of configuration.

Depending on your environment you may be limited based on 802.1x EAP-Type. (Entra doesn't support EAP-PEAP or MSCHAPv2 inner tunnes) TLS vs TTLS vs PEAP
Your 802.1x EAP-Type and who your identity provider is will determine how much you need to build for GPO/Intune/MDM integrations to install certificates. EntraID vs NPS vs Active Directory
Your 802.1x EAP-Type and identity provider will also determine what configuration is necessary. all require similar, but slightly different configurations. LDAP vs OpenID

We have some configuration guides.

https://emc.extremenetworks.com/content/oneview/docs/control/access_control/docs/portal_config/l_ov_ia_ht_oauth_entra_8021x.htm?Highlight=EntraID

https://emc.extremenetworks.com/content/oneview/docs/control/access_control/docs/portal_config/l_ov_ia_ht_oauth_entra_8021x_eap-tls.htm?

https://emc.extremenetworks.com/content/oneview/docs/control/access_control/nac_ht_local_radius_term.html?Highlight=PEAP

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000083607

Enabling authentication will be highly depending on the platform you are working with, but generally Extreme Switches are compatible with Control, so Control will handle global RADIUS configurations, while Policy Manager can enable authentication on a per port basis for SwitchEngine.

Highly recommended that you reach out to your account team and engage our professional services team who can guide you in the right direction and help you deploy this across your environment.

Thanks
-Ryan