topic Enforce fail on NAC in ExtremeCloud IQ- Site Engine Management Center

Enforce fail on NAC

Tyrone_Knight — Wed, 15 Jul 2015 18:40:00 GMT

Hi 🙂,

when I try to enforce the NAC appliances, I get a fail message (see pic below).
In the NAC Manager I can see the reason under "Status".
How can I solve this problem?

- The Netsight Server VM has a disabled firewall.
- SNMP settings are correct.
- I can see the appliances in Netsight Console and they are up. (Device Manager works too)

Thanks for any replies 🙂

RE: Enforce fail on NAC

Mike_Thomas — Wed, 15 Jul 2015 18:58:00 GMT

Hi Tyrone. Did this ever work?
The NAC Icons are orange, this is typically a license issue.

You may want to review the following article
https://gtacknowledge.extremenetworks.com/articles/Solution/NAC-Orange-Arrow-in-NAC-manager-Unlicens...

RE: Enforce fail on NAC

Ronald_Dvorak — Wed, 15 Jul 2015 18:59:00 GMT

A red/orange arrow means that there is a communication problem.
In short, without communication no enforcement.

SSH to the NAC appliance and run "nacstatus" - this might give some information on what is going wrong in the section "Communications Diagnostics",

If you see there a issue with WebServices you'd try...
https://gtacknowledge.extremenetworks.com/articles/Solution/New-NAC-Appliance-Green-in-NetSight-Cons...

What have you done tp run into this problem ?

-Ron

RE: Enforce fail on NAC

Tyrone_Knight — Thu, 16 Jul 2015 13:09:00 GMT

Update: Problem solved.

There were wrong DNS server IP addresses in the appliance network settings over the NAC Manager.

Thanks again for your help! 