topic RE: MAC Authenticate Enterasys C5 in Extreme X450 in ExtremeSwitching (Other)

MAC Authenticate Enterasys C5 in Extreme X450

Pionio — Mon, 27 Aug 2018 19:05:00 GMT

Hello

I want to mac authenticate C5 with X450.

In X450 I enabled netlogin mac auth and tested with other X450 but when a connect C5 link is up and nothing happens. RADIUS are not triggered.

Do I need make any configuration in C5?

Thanks in advance.

RE: MAC Authenticate Enterasys C5 in Extreme X450

Ryan_Yacobucci — Mon, 27 Aug 2018 19:39:00 GMT

Hello,

Check out this article on how to enable netlogin on XoS:

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-Mac-based-Netlogin-with-R...

You should not need configuration on C5. X450 should learn the MAC address and trigger RADIUS authentication.

Make sure BPDU guard, or some other spanning tree blocking mechanism isn't preventing issues.

Thanks
-Ryan

RE: MAC Authenticate Enterasys C5 in Extreme X450

Pionio — Tue, 28 Aug 2018 12:13:00 GMT

Hello

Netlogin configuration is exactly the same as the link you shared and works perfect for all devices connected (C5 not).

I'm sure BPDU is not part of this issue. I tested BPDU executing command:

configure stpd ports link-type edge edge-safeguard enable bpdu-restrict

And port was disabled. I restored original config.

Maybe configuring LLDP to advertise C5 MAC info can help. I will test.

Thanks

RE: MAC Authenticate Enterasys C5 in Extreme X450

Pionio — Wed, 29 Aug 2018 14:40:00 GMT

Hello

Authenticating C5 through MAC via Netlogin works perfect. The reason I did'nt find any info in log messages was C5 acts as a passive device and doesn't send any info to port switch connected.

When a device is connected to it or I execute ping command an auth mechanism is activated.

Thanks

RE: MAC Authenticate Enterasys C5 in Extreme X450

Ryan_Yacobucci — Wed, 29 Aug 2018 17:30:00 GMT

Very good!

Thanks!
-Ryan