topic NAC End-system administration in ExtremeCloud IQ- Site Engine Management Center

NAC End-system administration

daniel_griffis — Mon, 30 Jan 2017 03:49:00 GMT

We are about to start roll out of the Extreme Access control, I am the only person with much knowledge with Administering NAC. We have local Technical Support Specialists that we want to have limited access to view what end-systems are connecting and be able to trouble shoot those devices. Can anyone point me in the direction I should go with setting those users up with limited access? And I am also looking for a video or Tutorial on end-system trouble shooting.

RE: NAC End-system administration

Bharathiraja__S — Mon, 30 Jan 2017 11:41:00 GMT

Hi Daniel,

Please use below search link check details for all kind of NAC troubleshooting.

http://www.extremenetworks.com/search/#q=nac&t=All&sort=relevancy

Thanks,
Suresh.B

RE: NAC End-system administration

Chacko — Mon, 30 Jan 2017 15:11:00 GMT

I think you can grant the support read-only access to the end-systems tab.
So they can find every end-system and can see, what the NAC rules did with them.

Dependend on your authentication method, they can then check, e.g. if the Mac is registered, or the certificate expired, etc.
Read only for the switches wouldn't be a bad idea, too.

RE: NAC End-system administration

Ronald_Dvorak — Mon, 30 Jan 2017 15:26:00 GMT

Here a link to a old post on how to create a new user with limited capabilities ...

https://community.extremenetworks.com/extreme/topics/how-do-i-create-a-read-only-user-for-oneview