topic How to enforce Domain Policy on XMC to x690 in ExtremeSwitching (EXOS/Switch Engine)

How to enforce Domain Policy on XMC to x690

MarekorMark — Thu, 19 Sep 2019 14:37:30 GMT

I can't find out how to add X690 to policy domain. XMC throws out the popup window "The devices listed below were identified as Not Supported and will not be added to the domain."

Re: How to enforce Domain Policy on XMC to x690

Karthik_Mohando — Thu, 19 Sep 2019 14:49:08 GMT

Hi Marek,

May i know the EXOS version running on the switch?

Re: How to enforce Domain Policy on XMC to x690

MarekorMark — Thu, 19 Sep 2019 14:53:55 GMT

stack is on 30.2.1.8

Slot-1-Xcore.2 # sh configuration policy
#
# Module policy configuration.
#
enable policy

Re: How to enforce Domain Policy on XMC to x690

Karthik_Mohando — Thu, 19 Sep 2019 18:10:43 GMT

I just tried in lab.
I tried adding a X690 running EXOS 22.5.1.7 to policy domain and performed a enforce and it is successful.
System Type: X690-48t-2q-4c (Stack)
XMC 8.2

While doing a Enforce from the policy domain, did you noticed any other warnings or status messages?

is it possible to post a screenshot of the error message which you have mentioned before?

I am not sure if something changed in the recent versions causing this issue, so i would suggest to open up a GTAC case.

Re: How to enforce Domain Policy on XMC to x690

MarekorMark — Thu, 19 Sep 2019 18:58:01 GMT

I can ad switch to console, i can add switch to netsight but whitout assigne it to Doman Policy, and i can't add switch to Domain Policy through Java app - Netsight Policy Manager

I have 4 of those in 2 stacks

I'll try to boot switch with a backup image which is 22.6.X.X

Policy Manager

Netsight NAC manager

Netsight console

XMC Access Control

Re: How to enforce Domain Policy on XMC to x690

MarekorMark — Fri, 20 Sep 2019 17:08:03 GMT

As i said - ive tested switch on 22.6.X FW and i can assign Domain Policy
So its probably BUG in new 30.X

Re: How to enforce Domain Policy on XMC to x690

Karthik_Mohando — Fri, 20 Sep 2019 17:15:55 GMT

Thanks for getting back with the results, it looks like and need a GTAC case