Security

42 Topics

Disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption. Also disable MD5 and 96-bit MAC algorithms.

I am responsible for remediating security vulnerabilities on the network devices and we have about 15 Extreme access points flagged for vulnerabilities. The details are that I need to: Contact the vendor or consult product documentation to disable MD5 and 96-bit MAC algorithms. Contact the vendor...

ARP Validation with dynamically assigned VLANs

Hello Community,I was wondering about the appropriate way to configure ARP Validation in an Extreme Access Control Environment with dynamically assigned VLANs.From what I have found so far, you have to configure ARP Validation per vlan and port. This is not possible if the vlan, which should later b...

EAC: Policy rule, do I need or not a any deny role?

Hello There I'm just learning about configuring EAC, and I have a question about the configuring policy rule's. I understand that to allow or deny traffic in a policy rule I must add the policy role's needed to the rule. Now is my question, when I allow the needed traffic in the rule is there also...

Dragon IPS 8.3 change the IP Address subnet of network sensors

I am running Dragon IPS 8.3 and I need to change the subnet and gateway for 2 IPS sensors. What is the best way to complete these tasks?

802.1X

I want to do 802.1x. I have an Enterasys Switch, Windows Server 2012, Netsight and the NAC Appliance. I can not find a complete documentation that shows me the configuration of each device to be able to do the 802.1X. Appreciate the communities help.

Recovery Password Router Brocade MLXe-4

Our Office had Router Brocade MLXe-4. i tried to change old password on Router Brocade MLXe-4. After i tried some command line used ssh, i am done changing old password on Router Brocade MLXe-4. but after i had changed, i cannot login on Router Brocade MLXe-4 used new password and old password. Pl...

Extreme Control Assessment Agent

I need to list all of the devices connected via the NAC assessment agent to a specific assessment server. I've checked the web interface, but no go. Any help would be greatly appreciated. Thank you!

Extreme Control always hits default catch-all rule

We have setup Extreme Control using both 802.1X authentication and MAC authentication. Everything is working fine, however our 802.1X authentications also hit the default catch-all rule on MAC authentication. This is to be expected, that's why we created a rule in front of it configured for only MAC...

Extreme Control Appliance as accounting proxy for sso

Hello, is it possible to use control appliance/engine as accounting proxy for sso on firewalls? situation: Control appliance/engine is set as radius & accounting server. We like to forward accounting information to firewall for using SSO and authentication based policy on firewall. Is this possib...

Permit specific MAC address per port

I am trying to figure out how to enable port security on Extreme Summit 300-24 switches. Cisco provides this as a configurable feature. I don't believe Extreme has a comparable feature so I have been trying to use access lists to perform the same basic function. I have no problem creating the necess...

how to join NAC in a domain

Hi, how can i join the NAC in a domain? Thanks!

Does NAC have the capability to identify company issued devices by the certificate installed on them and can NAC mesh with Intune?

We are trying to see what our options or for identifying mobile devices by the certificate installed on them. We would be using Intune to push group policy settings and a cert. Currently the NAC is setup with AD connectivity. Can a rule be built to catch devices with a company issued cert and als...

Security Notice - VN-2016-001 OpenSSH

This vulnerability notice provides the official technical response from Extreme Networks regarding the OpenSSH vulnerabilities identified in CVE-2016-0777 and CVE-2016-0778. VN-2016-001 – OpenSSH The impacts of these vulnerabilities include possible unauthorized disclosure of information. Custome...

New GTAC Knowledge Articles July 12-19, 2015

Here are the new articles that were published last week (July 12 - July 19, 2015) in GTAC Knowledge: Sunday 7/19/2015: none Saturday 7/18/2015 How To Configure Routers at a Main and Remote location Using Static Routes Why does "show stacking-support" in Summit 460 series alternate stack shows stac...

VN-2015-007-LogJam

CVE-2015-4000 "LogJam" issue is due to the TLS protocol 1.2 and earlier not properly conveying a DHE_EXPORT choice when a DHE_EXPORT ciphersuite is enabled on a server but not on a client. This allows man-in-the-middle attackers to conduct cipher-downgrade attacks. Extreme Networks response to C...

DNS Server lost after NAC Upgrade to 6.1.X

After I upgraded a few NAC Appliances from 5.X to 6.1.X or from 6.1.X to latest 6.1.182 I had sometimes the problem that NAC lost its DNS Server information in the /etc/resolvresolv.conf. After dnetconfig (without changing something) all worked fine again. Does anybody know a reason for that? It d...

NAC second Nic

We are in the process of deploying multiple wifi controllers with multiple NAC appliances. The client have two core S series switches, NOT virtually bonded. The NAC appliances is being configured in a LSNAT group. Can a second NIC interface on the NAC appliance be configured on the NAC to allow for...

NAC GW as destination of GRE Tunnel interface, through WAN, for quarantine PBR traffic

Can the NAC GW handle traffic from a GRE tunnel interface of a router at a remote site which is using PBR to direct http trafic from quarantined users to that Tunnel interface? Thank you Carlos

EWC doesn't changes rule after guest registration

I've configures NAC as an external captive portal in EWC. When the client connects, it gets the Unregistered policy. After registration, the NAC changes the clients policy to Guest Access, but the EWC remains the Unregistered. I need to disassociate the client form the EWC to set the EWC the Guest A...

shellshock vulnerability

when can we reckon with a statement about the shellshock vulnerabilty ? are there any advises regarding this problem to enterasys / extreme products to bypass the time untill an official statement / patches for the affected products are released?are there products which are for sure not affected ( p...

NAC Load Balancing with Guest Portal

Hi there, Does anyone out there have experience of using multiple NAC appliances with the self registration portal in an LSNAT load balancing configuration? I have just added a second NAC appliance to an existing working setup, and configured load balancing for RADIUS auth. The RADIUS side of thin...

1
2

Page 1 / 2

User Leaderboard

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded