topic MGMT Authentication - Switch and NAC in ExtremeControl

MGMT Authentication - Switch and NAC

Giuseppe_Montan — Wed, 17 Feb 2021 21:41:29 GMT

Good Afternoon,

I have 1 XMC+NAC+X440G2

I want to use NAC as radius to authenticate Windows User ( on LDAP/NPS 2012 ) to connect to Switches on SSH.

Thanks in advance

Giuseppe

Re: MGMT Authentication - Switch and NAC

StephanH — Wed, 17 Feb 2021 21:57:38 GMT

Hello Giuseppe ,

here a short guide the screenshot are from the old java tool but the menus are the same in the XMI HTML view.

https://extremeportal.force.com/ExtrArticleDetail?an=000081977&q=extreme%20nac%20management%20login%20xos

Re: MGMT Authentication - Switch and NAC

Giuseppe_Montan — Wed, 17 Feb 2021 22:54:09 GMT

Thanks, If I do a test i receive lot of errors.

But if I want to do a request to NAC and NAC do a request to NPS ?

Giuseppe

Re: MGMT Authentication - Switch and NAC

StephanH — Thu, 18 Feb 2021 01:39:52 GMT

Hello,

maybe you can explane a little bit more about your configuration. In the example I posted, NAC directly request to the AD via LDAP. Therefore you do not need an NPS. Why do you want to use the NPS?

Re: MGMT Authentication - Switch and NAC

Giuseppe_Montan — Mon, 22 Feb 2021 05:26:32 GMT

Good Evenin, now it works ( I did something wrong when I followed the guide ).

A question, is the same confguration to authentcate the V6120 to NAC ( only for management login ) ?

Thanks

Giuseppe

Re: MGMT Authentication - Switch and NAC

StephanH — Tue, 23 Feb 2021 02:32:59 GMT

Hello,

yes XCC admins can be authenticated with the same way.

Re: MGMT Authentication - Switch and NAC

Giuseppe_Montan — Tue, 23 Feb 2021 05:24:11 GMT

Unfortunately it does not work ( or probably I did something in a wrong way ).

Now I can authenticate X440 on NAC, no XCC, if I test the radius configuration I receive Authentication error as answer.

I opened a ticket and I replicated the environment on my lab.

Thanks

Giuseppe

Re: MGMT Authentication - Switch and NAC

Miguel-Angel_RO — Tue, 23 Feb 2021 22:03:42 GMT

Giuseppe,

it is in this menu:

Mig

Re: MGMT Authentication - Switch and NAC

Miguel-Angel_RO — Tue, 23 Feb 2021 22:04:42 GMT

And there is a test button

Re: MGMT Authentication - Switch and NAC

Giuseppe_Montan — Tue, 23 Feb 2021 22:18:00 GMT

Thanks, If I configure NPS it works ( test is ok ) but if I replicated the same configuration for NAC I receive unknown error and Invalid Credentials.

Thanks

Giuseppe