https://community.extremenetworks.com/t5/extremeswitching-other/x450g2-intrusion-reaction/m-p/66546#M3681 Hello community,<BR /><BR />i am far from intermediate regarding Exos and i am searching for a way to block unknown devices with a little app i am currently writing for our office:<BR /><BR />This app identifies machines that are not known in the network<BR />If a machine is not known it will be scanned and tested, informing the admin<BR />The machine receives a message that it will be forced out of the network<BR />All done so far...<BR />-&gt;From here i would like our exos to route all traffic from this machine (by ip or mac) in a dead vlan.&lt;-<BR />This could not be port-specific as fe all wlan traffic comes from one port.<BR /><BR />At best this would be a console command that could be send via ssh. Any solutions?<BR /><BR />Thx in advance Thu, 25 Aug 2022 12:47:26 GMT SaschaE 2022-08-25T12:47:26Z https://community.extremenetworks.com/t5/extremeswitching-other/x450g2-intrusion-reaction/m-p/66546#M3681 Hello community,<BR /><BR />i am far from intermediate regarding Exos and i am searching for a way to block unknown devices with a little app i am currently writing for our office:<BR /><BR />This app identifies machines that are not known in the network<BR />If a machine is not known it will be scanned and tested, informing the admin<BR />The machine receives a message that it will be forced out of the network<BR />All done so far...<BR />-&gt;From here i would like our exos to route all traffic from this machine (by ip or mac) in a dead vlan.&lt;-<BR />This could not be port-specific as fe all wlan traffic comes from one port.<BR /><BR />At best this would be a console command that could be send via ssh. Any solutions?<BR /><BR />Thx in advance Thu, 25 Aug 2022 12:47:26 GMT https://community.extremenetworks.com/t5/extremeswitching-other/x450g2-intrusion-reaction/m-p/66546#M3681 SaschaE 2022-08-25T12:47:26Z https://community.extremenetworks.com/t5/extremeswitching-other/x450g2-intrusion-reaction/m-p/93234#M4034 <P>You can configure Extreme Policy statically with two Roles "Untested" and "Approved" with different VLANs and permissions.&nbsp; Normally we would just use Radius to do all the auth and checking but you could swap the static Policy Role via SSH, and the port would take over the config.&nbsp; The main limitation is this is for the entire port not per MAC.&nbsp;&nbsp;</P> Tue, 04 Oct 2022 13:58:41 GMT https://community.extremenetworks.com/t5/extremeswitching-other/x450g2-intrusion-reaction/m-p/93234#M4034 StephenW 2022-10-04T13:58:41Z