topic X430 netlogin - shutdown port in ExtremeCloud IQ- Site Engine Management Center

X430 netlogin - shutdown port

Ronald_Dvorak — Tue, 21 Mar 2017 21:51:00 GMT

Hi,

the setup is a X430 with netlogin / MAC-auth via NAC.

I use RFC3580 to dynamical assign the VLAN to the port (as the X430 doesn't support policy/roles).

I'd like to auto shutdown ports if the client doesn't match a NAC rule or matches my last deny rule.
Is there a way to do it or a CLI netlogin command to shutdown the port if a reject is rx from the NAC.

Thanks,
Ron

RE: X430 netlogin - shutdown port

Patrick_Koppen — Wed, 22 Mar 2017 02:06:00 GMT

Return a 'shutdown'-profile which starts a upmscript (user-auth triggered), which disables the port....

Or a upm script triggered by the reject event....

RE: X430 netlogin - shutdown port

M_Nees — Wed, 22 Mar 2017 02:06:00 GMT

Be aware X430 needs at least EXOS 16.2.x to support UPM Scripts!