topic NAC end-system MAC Mask in ExtremeCloud IQ- Site Engine Management Center

NAC end-system MAC Mask

Anonymous — Wed, 02 Aug 2017 22:17:00 GMT

Hi,

Currently running version 8.0.2.42, and am in the process of writing a MAC Mask in NAC / Control.

What I'm not sure is if I have entered it correctly, and can't seem to find any working examples.

Here is what I have entered:

Problem with this is when I hit update it will just permanently sit there 'Loading' until I cancel it:

I can go back into it again but the MAC address part is missing, so perhaps I'm doing something wrong?

If anyone has example might be good?

Many thanks.

RE: NAC end-system MAC Mask

Anonymous — Wed, 02 Aug 2017 23:20:00 GMT

Wasn't too far off in the end, the answer is:

RE: NAC end-system MAC Mask

Ronald_Dvorak — Wed, 02 Aug 2017 23:35:00 GMT

Wouldn't work for my APs as you'd see on my AP MAC list - I've some older models and even the Extreme APs are not from the same production patch.

Might be better to use only the vendor OUI = D4:84:66:00:00:00 FF:FF:FF:00:00:00 instead of also using the 4th byte.

-Ron

RE: NAC end-system MAC Mask

Anonymous — Wed, 02 Aug 2017 23:35:00 GMT

Thanks Ron.

RE: NAC end-system MAC Mask

Erik_Auerswald — Thu, 03 Aug 2017 13:34:00 GMT

Hi Martin,

I would have expected that all six bytes of the MAC need to be specified, similar to IPv4 networks, as you found out.

It would be nice for EMC / EAC to issue an error message if the input is obviously incorrect (e.g. missing bytes).

Thanks,
Erik

RE: NAC end-system MAC Mask

Anonymous — Thu, 03 Aug 2017 13:34:00 GMT

Thanks Erik