Security

10 days ago

I want to do 802.1x. I have an Enterasys Switch, Windows Server 2012, Netsight and the NAC Appliance. I can not find a complete documentation that shows me the configuration of each device to be able to do the 802.1X. Appreciate the communities help.

abechir New Member

802.1X

Question

0 185 0

Our Office had Router Brocade MLXe-4. i tried to change old password on Router Brocade MLXe-4. After i tried some command line used ssh, i am done changing old password on Router Brocade MLXe-4. but after i had changed, i cannot login on Router Brocade MLXe-4 used new password and old password. Pl...

3 months ago

U

udinfic New Member

Recovery Password Router Brocade MLXe-4

Question

0 201 0

U

4 months ago

I need to list all of the devices connected via the NAC assessment agent to a specific assessment server. I've checked the web interface, but no go. Any help would be greatly appreciated. Thank you!

Moses64 New Member

Extreme Control Assessment Agent

Question

0 117 0

5 months ago

We have setup Extreme Control using both 802.1X authentication and MAC authentication. Everything is working fine, however our 802.1X authentications also hit the default catch-all rule on MAC authentication. This is to be expected, that's why we created a rule in front of it configured for only MAC...

Wishmaster84 New Member

Extreme Control always hits default catch-all rule

Question

0 125 0

5 months ago

Hello, is it possible to use control appliance/engine as accounting proxy for sso on firewalls? situation: Control appliance/engine is set as radius & accounting server. We like to forward accounting information to firewall for using SSO and authentication based policy on firewall. Is this possib...

Peter Participator

Extreme Control Appliance as accounting proxy for sso

Question

0 263 4

8 months ago

T

Tom Gavin New Member

Permit specific MAC address per port

I am trying to figure out how to enable port security on Extreme Summit 300-24 switches. Cisco provides this as a configurable feature. I don't believe Extreme has a comparable feature so I have been trying to use access lists to perform the same basic function. I have no problem creating the necess...

0 520 4

2 years ago

Hi, how can i join the NAC in a domain? Thanks!

Marlon New Member

how to join NAC in a domain

0 615 6

R

2 years ago

We are trying to see what our options or for identifying mobile devices by the certificate installed on them. We would be using Intune to push group policy settings and a cert. Currently the NAC is setup with AD connectivity. Can a rule be built to catch devices with a company issued cert and als...

Pierre Demassey New Member

Does NAC have the capability to identify company issued devices by the certificate installed on them and can NAC mesh with Intune?

0 274 1

3 years ago

Drew C. Community Manager

Security Notice - VN-2016-001 OpenSSH

This vulnerability notice provides the official technical response from Extreme Networks regarding the OpenSSH vulnerabilities identified in CVE-2016-0777 and CVE-2016-0778. VN-2016-001 – OpenSSH The impacts of these vulnerabilities include possible unauthorized disclosure of information. Custome...

2 211 5

3 years ago

K

Ken Thomas Extreme Alum

New GTAC Knowledge Articles July 12-19, 2015

Here are the new articles that were published last week (July 12 - July 19, 2015) in GTAC Knowledge: Sunday 7/19/2015: none Saturday 7/18/2015 How To Configure Routers at a Main and Remote location Using Static Routes Why does "show stacking-support" in Summit 460 series alternate stack shows stac...

3 276 2

R

4 years ago

CVE-2015-4000 "LogJam" issue is due to the TLS protocol 1.2 and earlier not properly conveying a DHE_EXPORT choice when a DHE_EXPORT ciphersuite is enabled on a server but not on a client. This allows man-in-the-middle attackers to conduct cipher-downgrade attacks. Extreme Networks response to C...

Weidle, Bert Extreme Employee

VN-2015-007-LogJam

1 144 0

4 years ago

After I upgraded a few NAC Appliances from 5.X to 6.1.X or from 6.1.X to latest 6.1.182 I had sometimes the problem that NAC lost its DNS Server information in the /etc/resolvresolv.conf. After dnetconfig (without changing something) all worked fine again. Does anybody know a reason for that? It d...

Michael Kirchner New Member

DNS Server lost after NAC Upgrade to 6.1.X

Question

1 237 10

4 years ago

We are in the process of deploying multiple wifi controllers with multiple NAC appliances. The client have two core S series switches, NOT virtually bonded. The NAC appliances is being configured in a LSNAT group. Can a second NIC interface on the NAC appliance be configured on the NAC to allow for...

Andre Brits Kannemeyer Contributor

NAC second Nic

Question

0 197 1

R

4 years ago

Can the NAC GW handle traffic from a GRE tunnel interface of a router at a remote site which is using PBR to direct http trafic from quarantined users to that Tunnel interface? Thank you Carlos

Carlos Silva New Member

NAC GW as destination of GRE Tunnel interface, through WAN, for quarantine PBR traffic

Question

0 123 0

I've configures NAC as an external captive portal in EWC. When the client connects, it gets the Unregistered policy. After registration, the NAC changes the clients policy to Guest Access, but the EWC remains the Unregistered. I need to disassociate the client form the EWC to set the EWC the Guest A...

4 years ago

G

Gabriel Bagita New Member

EWC doesn't changes rule after guest registration

Question

0 308 4

4 years ago

when can we reckon with a statement about the shellshock vulnerabilty ? are there any advises regarding this problem to enterasys / extreme products to bypass the time untill an official statement / patches for the affected products are released?are there products which are for sure not affected ( p...

Patrick Graf New Member

shellshock vulnerability

Question

5 195 3

B

4 years ago

Hi there, Does anyone out there have experience of using multiple NAC appliances with the self registration portal in an LSNAT load balancing configuration? I have just added a second NAC appliance to an existing working setup, and configured load balancing for RADIUS auth. The RADIUS side of thin...

Mark Lamond New Member

NAC Load Balancing with Guest Portal

Question

1 236 4

5 years ago

Hi We have implemented Aptilo platform and would like to get help on the settings for sending syslog to our SIEM: Aptilo AC Aptilo CORE 5 - Linux ac1.wificiutada.intra 2.6.18-274.12.1.el5 #1 SMP Tue Nov 29 13:37:35 EST 2011 i686 i686 i386 GNU/Linux Aptilo Access Co...

cos New Member

Aptilo AC/SPA/MAS - Logging syslog Messages to SIEM

Question

0 132 0

5 years ago

Hi I like to receive through syslog to my SIEM the "event logging" generated by a BlueCoat SG810. I already configured the BlueCoat and in my SIEM, in LOG ACTIVITY, this is what appears Event Name:Unknown log event Low Level Category:Unknown Generic Log Event Event Description:Unknown Generic Log-...

cos New Member

BlueCoat SG810 Event Logging - Enterasys SIEM

0 227 0

Hello, the issue is how to deploy IPS system as a failover cluster. Can either EMS or IPS hardware sensor be deployed anyhow for redundancy? Kind regards Thomas

5 years ago

Tomasz Embassador

Dragon IPS system redundancy

Question

0 150 0

5 years ago

As a switch hardening , It is required to disable FTP and i cannot find direct command

Abdallah New Member

How can I disable FTP on I/B/S Series switch ??

Question

0 183 1

J

5 years ago

Does anyone have any information on whether or not and which Enterasys or Extreme products are affected by this vulnerability?

Andy_M New Member

heartbleed OpenSSL vulnerability

Question

0 293 9

We have a number of laptops that are mobile labs (Tanks) and in the library for students to check out. We push the 802.1x settings via AD and it works very well. The problem we have run into is that when we have login set to 'user or computer' and check single sign-on it comes up and logs into the...

5 years ago

J

John Kaftan New Member

802.1x and Single Sign-on

Question

0 1852 9

5 years ago

I have my server logs SIEM dragon set up as follows: 1. I have multiple devices configured to send logs to my server logs (SIEM Dragon); Log Sources from different customers. 2. I created a group for each customer (Log Source Groups) and I have grouped the corresponding devices. 3. Likewise, I...

cos New Member

SIEM Dragon 7.7.2 Patch 2 Offenses and Reports

Question

0 149 0