topic Re: Make filter-id for wing APs(distibuted mode) work in XCA in Extreme Cloud

Make filter-id for wing APs(distibuted mode) work in XCA

SantM — Fri, 24 Apr 2020 18:23:44 GMT

Hi guys.

In my XCA deployment, I do have both centralized and distributed sites with same network/ssid deployment. Filter-id attribute from server is accepted by XCA only for centralized, but not for distributed mode. If I see NAC authorization, everything seems fine. Do you know how can I make Filter-id work also for Wing APs/distributed site? If I change Filter-id to Tunnel-Private-Group-Id as radius attribute, XCA accepts it.

Re: Make filter-id for wing APs(distibuted mode) work in XCA

Ronald_Dvorak — Fri, 24 Apr 2020 19:09:59 GMT

Hi,

here the answer from the KB article…..

Answer

No, at this time Wing AP's do not understand Extreme proprietary "Filter-ID" and you must configure NAC to return standard Filter-ID Radius attributes rather than "Extreme Identifi Wireless"

https://gtacknowledge.extremenetworks.com/articles/Q_A/Wing-AP-s-in-XCA-do-not-accept-Extreme-Identifi-Wireless-Filter-ID-when-sending-role-from-NAC

-Ron

Re: Make filter-id for wing APs(distibuted mode) work in XCA

SantM — Fri, 24 Apr 2020 22:08:31 GMT

Hi Ron,

Thank you for your reply. I already did that testing. It makes the situation worse when I change to standard filter-id. NAC stops sending authorization parameters when I set standard filter-id.

I have been tasting different things on new XCA 04.76.03 version against Wing AP today. I have already found several issues.

BR,

Santosh