topic RE: Extreme Switch with authentication with fingerprint device in ExtremeSwitching (EXOS/Switch Engine)

Extreme Switch with authentication with fingerprint device

Sebastian_Rojas — Tue, 29 Mar 2016 22:46:00 GMT

Hello,

I have a question, when a user mark his figerprint i an biometric device, can i order the switch port related to that user to power on and when the user go to his home, the switch port
power off,

What kind of feature do i need to complete this task, there is something related to the extreme vendor, such a NAC device, can i use other alternatives ?
or something like that or is only about in de CLI of the switch with support of 802.1X.

We have summit x440Summit

Can anyone help me with this, to know if this can be done
Thanks a lot for your time
Best Regards

RE: Extreme Switch with authentication with fingerprint device

Dorian_Perry — Tue, 29 Mar 2016 23:24:00 GMT

Hi Sebastian,

Would the biometric device be connected to the users PC and interact with the PC OS for authentication?

RE: Extreme Switch with authentication with fingerprint device

Sebastian_Rojas — Tue, 29 Mar 2016 23:31:00 GMT

it's a centralized device, where the data for all the users y enrolled and then they can start to sign in, so i think how can a integrate the biometric device to the switch with 802.1X
or this only can be done with a product like this :

http://www.extremenetworks.com/product/control-center

RE: Extreme Switch with authentication with fingerprint device

Sebastian_Rojas — Tue, 29 Mar 2016 23:32:00 GMT

oooh sorry Dorian, this link!
thanks for your help?

http://learn.extremenetworks.com/rs/extreme/images/NAC-DS.pdf

RE: Extreme Switch with authentication with fingerprint device

Drew_C — Tue, 29 Mar 2016 23:50:00 GMT

The Identity Management feature in EXOS might be able to do this, coupled with UPM scripting to trigger PoE on the port.
I know this was one of the use cases when this feature was introduced several years back, but I can't find the documentation on how to configure it this way. The idea was that IDM sees the user login and logoff (or badge in/out) and can trigger that user's port to power their phone while in the office. When they are out of the office, power is disabled, thereby increasing overall power savings while the office is empty.

Someone else may have the example documentation closer at hand than I do.

RE: Extreme Switch with authentication with fingerprint device

Sebastian_Rojas — Wed, 30 Mar 2016 00:28:00 GMT

Hello Drew,

i will read the the identity management in the reference bookmap

https://www.extremenetworks.com/wp-content/uploads/2014/03/EXOSReference_bookmap.pdf

pag. 1627

i read about a UPM scripting in forums and a found this type, thi

#############################################################

create upm profile disable-ports
disable port 1
.

create upm profile enable-ports
enable port 1
.

create upm timer disableports
configure upm timer disableports profile disableports
configure upm timer disableports at 9 15 2009 19 00 00 every 86400

create upm timer enableports
configure upm timer enableports profile enableports
configure upm timer enableports at 9 16 2009 7 00 00 every 86400

###################################################################

Link of the script : http://www.tek-tips.com/viewthread.cfm?qid=1594011

This is the form of create a UPM script?
there is a type of guide to know the commands about the UPM scripting

Thanks a lot for all your help!

RE: Extreme Switch with authentication with fingerprint device

Drew_C — Wed, 30 Mar 2016 00:28:00 GMT

That's the basic idea for UPM. Here's another brief overview of how it works:
https://community.extremenetworks.com/extreme/topics/poe-scheduling-upm-profiles

And another example using the above thread:
https://community.extremenetworks.com/extreme/topics/activate-a-copper-port-based-on-day-and-time

Unfortunately, I don't have any working example scripts other than the outlines in the two threads above. Aside from triggering on fingerprint authentication, you're really close with this.

RE: Extreme Switch with authentication with fingerprint device

Sebastian_Rojas — Wed, 30 Mar 2016 00:28:00 GMT

Thanks a lot for all your help, if i have any problem when i try to connect to the ldap and run the script, i will post for a review!

Thanks for your help and patience
Best Regards

RE: Extreme Switch with authentication with fingerprint device

Drew_C — Wed, 30 Mar 2016 00:28:00 GMT

You're welcome! good luck 🙂