topic Re: Policy push (XMC -> switch) not working (correctly) in ExtremeControl

Policy push (XMC -> switch) not working (correctly)

Peer-JoachimK — Wed, 20 Oct 2021 12:41:04 GMT

Hi,
we are currently setting up out new edge network. We want to use policy rules

to push clients into the correct vlans.

We also try to use it for AP. In this case we need one untagged vlan, and some tagged vlans (for the ssids).

We changed the policy within the XMC, but the policy is NOT updated correctly. We also delete the policy on

the switch and enforced the settings - same result. The old (wrong policy) is pushed.

Any idea ?
p.s. Yes we save everything ... 😉
XMC 8.5.5.32

Switch X5520 ExtremeXOS version 31.4.1.5 (fabric attach)

Bye,
Peer

Re: Policy push (XMC -> switch) not working (correctly)

Brian_Anderson1 — Wed, 20 Oct 2021 15:53:28 GMT

What does XMC say when you run a verify?

Also, if you are using AP Aware feature with contain to vlan enabled, for some reason developers thought it was a good idea to make you do this:
https://extremeportal.force.com/ExtrArticleDetail?an=000078971

Not sure if that is your issue or not.

Also check to make sure your switch is in the correct policy domain.

Re: Policy push (XMC -> switch) not working (correctly)

Peer-JoachimK — Mon, 25 Oct 2021 09:23:37 GMT

Hi,

sorry for the delay. We are currently rebuilding the whole network infrastructure .....

When we run a verify we see the following message:

Domain Role [AP_Ruckus] Mismatch - The following config needs to be written: [VLAN Egress List Mismatch] to 10.128.X.X

When we delete the policy, the XMC is pushing the following rule:

configure policy profile 11 name "AP_Ruckus" access-list "AP_Ruckus" pvid-status "enable" pvid 13 egress-vlans 3,9,11,13,17,19 auth-override "enable" nsi 200013

but it should look like this (in the config *IT IS* configured like this...)

configure policy profile 11 name "AP_Ruckus" access-list "AP_Ruckus" pvid-status "enable" pvid 13 egress-vlans 3,9,11,17,19 nsi 200013

We saved the domain etc. pp. but nothing seems to work ...

Re: Policy push (XMC -> switch) not working (correctly)

Ryan_Yacobucci — Tue, 26 Oct 2021 15:17:13 GMT

Hello,

If you look at the policy in XMC does it have this enabled?

The auth override is the only thing different between those two policy lines and this will turn that on.

Thanks
-Ryan