topic RE: how to join NAC in a domain in Security

how to join NAC in a domain

Marlon — Thu, 26 Jan 2017 16:23:00 GMT

Hi,

how can i join the NAC in a domain?

Thanks!

RE: how to join NAC in a domain

Bharathiraja__S — Thu, 26 Jan 2017 18:08:00 GMT

Hi Marlon,

Please check this article.

https://gtacknowledge.extremenetworks.com/articles/Q_A/How-do-I-know-if-the-NAC-has-joined-the-domai...

let us know if this answers your question.

Thanks,
Suresh.B

RE: how to join NAC in a domain

Marlon — Thu, 26 Jan 2017 22:23:00 GMT

Hi Suresh,

thanks!

I can't find [NACInfoLogger] Joined Active Directory Domain logs in my NAC.

how can I join the NAC to active directory? is there any procedure?

thanks!

RE: how to join NAC in a domain

Ryan_Yacobucci — Thu, 26 Jan 2017 22:23:00 GMT

Hello,
The procedure to join to a NAC domain is done automatically with the onboard SAMBA package that is deployed. In order to trigger this join attempt you must have an Advanced AAA configuration with at least one line set to "LDAP Authentication" and pointed to an LDAP configuration that is set to "NTLM Authentication"

The NAC determines who the domain controller is to attempt to join by doing a DNS lookup of the domain configured.

The NAC uses the "user" and "Password" fields from the LDAP configuration to attempt to join the active directory.

The NAC will attempt to re-join the active directory if a nacctl restart is issued, or if a configuration change is made that removes, and then reapplies the LDAP authentication or NTLM authentication configuration pieces.

Thanks
-Ryan

RE: how to join NAC in a domain

Bharathiraja__S — Sun, 29 Jan 2017 14:32:00 GMT

Hi Marlon,
Please let us know if you have any further questions.

Thanks,
Suresh.B

RE: how to join NAC in a domain

Marlon — Tue, 31 Jan 2017 10:31:00 GMT

Hi Ryan/Suresh,

thanks for the explanation.

unfortunately my NAC cannot joined the Domain.

i tried the kb below

https://gtacknowledge.extremenetworks.com/articles/Solution/802-1x-authentication-doesn-t-work-for-W...

result in our NAC

same result. do we need a certificate to join the NAC to domain?

thanks

RE: how to join NAC in a domain

Ryan_Yacobucci — Thu, 02 Feb 2017 09:47:00 GMT

Hello,

Please check out the following article. Typically these are permissions type issues that need to be looked at.

https://gtacknowledge.extremenetworks.com/articles/Q_A/Why-Are-Reset-Password-Permissions-Needed-for...

Thanks
-Ryan