topic Re: Access Control Lost Contact with Switch in ExtremeCloud IQ- Site Engine Management Center

Access Control Lost Contact with Switch

JohanHendrikx — Fri, 18 Dec 2020 17:32:31 GMT

When I do an enforce on the EAC engine this error appears.

Full Loss of Contact to Switch detected: ,IP-Address> due to: Unable to make SNMP contact

Is this normal behaviour?

Can this be solved?

Re: Access Control Lost Contact with Switch

Miguel-Angel_RO — Fri, 18 Dec 2020 17:33:54 GMT

What is the error?

Re: Access Control Lost Contact with Switch

Miguel-Angel_RO — Fri, 18 Dec 2020 18:33:46 GMT

Johan,

That messages are normal.

It just mention that EAC servers are not able to contact the mentioned devices with SNMP.

Those devices are probably down (or SNMP credentials are wrong) and the EAC server complain about it at each enforcement.

You can get rid of this.

Mig

Re: Access Control Lost Contact with Switch

JohanHendrikx — Fri, 18 Dec 2020 18:36:51 GMT

Miguel,

The device is not down and the snmp credentials are oke.

Re: Access Control Lost Contact with Switch

StephanH — Fri, 18 Dec 2020 19:32:08 GMT

Hello Johan,

first you can check if SNMP is fine with an SNMP walk from the XMC-CLI:

snmpwalk -v3 -l authPriv -u <username> -a SHA -A <authpw> -x DES -X <privpw> <switchip>

You have to fill in the following values according the SNMP profile from XMC

<username>

<authpw>

<privpw>

<switchip>

If you are not using SHA/DES please change that accordingly!

In addition, I would like to know which XMC version you are using and if the problem occurs since an update?

Re: Access Control Lost Contact with Switch

JohanHendrikx — Fri, 18 Dec 2020 21:41:40 GMT

I checked with snmpv3 the connection to switch. that is OK.

Versions:

XMC is 8.4.4.26

EAC is 8.4.1.24

Re: Access Control Lost Contact with Switch

Miguel-Angel_RO — Fri, 18 Dec 2020 21:47:35 GMT

Johan,

Just to be sure, could you check the snmpwalk from the NAC servers?

Mig

Re: Access Control Lost Contact with Switch

M_Nees — Fri, 18 Dec 2020 22:11:10 GMT

Hi,

i had the same issues and open a GTAC case.

GTAC give me the advice to disable “Router Discovery” related to NAC Engine - MAC-to-IP-Resolution Settings.

Re: Access Control Lost Contact with Switch

StephanH — Fri, 18 Dec 2020 22:11:34 GMT

Hello John,

please check the XMC log file /usr/local/Extreme_Networks/NetSight/appdata/logs/server.log.

Especially if there are duplicate SNMP engine IDs.

Re: Access Control Lost Contact with Switch

JohanHendrikx — Tue, 22 Dec 2020 20:23:48 GMT

@StephanH In the logfile no entry's of duplicate SNMP Engine's

Re: Access Control Lost Contact with Switch

JohanHendrikx — Mon, 28 Dec 2020 15:19:25 GMT

@M.Nees I changed those settings. I'll let you know what the results are.

Re: Access Control Lost Contact with Switch

JohanHendrikx — Thu, 31 Dec 2020 15:04:44 GMT

@M.Nees , this wasn't the solution. Errors are still there

Re: Access Control Lost Contact with Switch

DrankThePurpleS — Sat, 02 Jan 2021 17:11:31 GMT

Update both to latest firmware.

Been a while, full loss of contact, enforcement engine could have changed.