topic RE: Exclude the switch from NAC temporary in ExtremeWireless (General)

Exclude the switch from NAC temporary

Yves_Haslimann — Fri, 16 Dec 2016 23:33:00 GMT

Hello,

I have an extreme NAC solution running. For maintenance reason, I would like to exclude a switch temporary from NAC. So after excluding, the NAC should answer all NetLogin events from this switch with an ACCEPT packet.

My idea was to great a device group in the netsight called "unmonitored" and add this switch temporary to this group. I would then create a NAC rule at the top which check, if the switch is in this device group or not.
But, I can't create a NAC rule which checks the device group.

Is there another way to do this? Or do I it wrong?

Thank you, best regards
Yves

RE: Exclude the switch from NAC temporary

Ronald_Dvorak — Fri, 16 Dec 2016 23:53:00 GMT

Hi Yves, that should work, below a example.
Make sure that the rule is above all other custom rules so it's checked first.
Add the switches to the location group.

-Ron

RE: Exclude the switch from NAC temporary

Yves_Haslimann — Sat, 17 Dec 2016 00:00:00 GMT

Hi Ron, thanks for your answer. I know that I could do it this way. But my goal is, that a supporter can add the switch to a device groupt in the oneview.

RE: Exclude the switch from NAC temporary

Ronald_Dvorak — Sat, 17 Dec 2016 00:06:00 GMT

You'd also configure/add it via EMC/Control...

RE: Exclude the switch from NAC temporary

Yves_Haslimann — Sat, 17 Dec 2016 16:36:00 GMT

Hi Ron,

yes I guess it's the only way to add the switch IP static to a location group.
Thank you anyway for your feedback.

Yves