topic RE: NAC Guest Portal redundancy in ExtremeCloud IQ- Site Engine Management Center

NAC Guest Portal redundancy

Thomas_Hilber — Thu, 07 Jun 2018 19:41:00 GMT

Hi all,
we are using Extreme Control with two redundant NAC appliances. The radius part is working fine, but now we want to add redundancy for the guest registration web page, too.

Does anyone have experience with two redundant guest portals in Extreme NAC? Is this a valid setup anyway?
In the EWC we now have set up redirection to the IP of the first NAC portal. At this point DNS could be used to get the redundancy to point to both NAC portals. But I'm not sure if this works out as a whole.

Thanks, Thomas

RE: NAC Guest Portal redundancy

Seth_Bean — Thu, 07 Jun 2018 19:50:00 GMT

We have two redundant NAC appliances with the same portals. GTAC helped us setup the configuration on the switches so they pickup the slack of the other if one is out of commission. The portals work seamlessly.

RE: NAC Guest Portal redundancy

Thomas_Hilber — Thu, 07 Jun 2018 19:50:00 GMT

That's a good point to know that the two portals work together. In our case the wirless controller is making the redirect to the portal. On the controller it's only possible to define one IP address or a FQDN. So maybe it's better to do the redirection on the switches. Could you give me a hint on how the switch configuration looks like?

RE: NAC Guest Portal redundancy

StephanH — Fri, 08 Jun 2018 12:10:00 GMT

Hello Thomas,

if you use DNS Proxy (works with wireless controller) described here:
https://gtacknowledge.extremenetworks.com/articles/How_To/How-To-Determine-What-Type-of-Redirection-...

you can point the 1st DNS entry to NAC1 and an 2nd entry to NAC2.

Best regards
Stephan