Extreme Networks

Hello Community,I was wondering about the appropriate way to configure ARP Validation in an Extreme Access Control Environment with dynamically assigned VLANs.From what I have found so far, you have to configure ARP Validation per vlan and port. This is not possible if the vlan, which should later b...

Michael Eisenschmid Extreme Hero

ARP Validation with dynamically assigned VLANs

Question

1 76 0

22 days ago

Hello There I'm just learning about configuring EAC, and I have a question about the configuring policy rule's. I understand that to allow or deny traffic in a policy rule I must add the policy role's needed to the rule. Now is my question, when I allow the needed traffic in the rule is there also...

Rien van Maurik New Member

EAC: Policy rule, do I need or not a any deny role?

Question

0 230 4

2 months ago

I am running Dragon IPS 8.3 and I need to change the subnet and gateway for 2 IPS sensors. What is the best way to complete these tasks?

meAP New Member

Dragon IPS 8.3 change the IP Address subnet of network sensors

Question

0 457 2

3 months ago

I want to do 802.1x. I have an Enterasys Switch, Windows Server 2012, Netsight and the NAC Appliance. I can not find a complete documentation that shows me the configuration of each device to be able to do the 802.1X. Appreciate the communities help.

abechir New Member

802.1X

Question

0 361 0

Our Office had Router Brocade MLXe-4. i tried to change old password on Router Brocade MLXe-4. After i tried some command line used ssh, i am done changing old password on Router Brocade MLXe-4. but after i had changed, i cannot login on Router Brocade MLXe-4 used new password and old password. Pl...

7 months ago

U

udinfic New Member

Recovery Password Router Brocade MLXe-4

Question

0 457 0

U

8 months ago

I need to list all of the devices connected via the NAC assessment agent to a specific assessment server. I've checked the web interface, but no go. Any help would be greatly appreciated. Thank you!

Moses64 New Member

Extreme Control Assessment Agent

Question

0 311 0

8 months ago

We have setup Extreme Control using both 802.1X authentication and MAC authentication. Everything is working fine, however our 802.1X authentications also hit the default catch-all rule on MAC authentication. This is to be expected, that's why we created a rule in front of it configured for only MAC...

Wishmaster84 New Member

Extreme Control always hits default catch-all rule

Question

0 320 0

Hello, is it possible to use control appliance/engine as accounting proxy for sso on firewalls? situation: Control appliance/engine is set as radius & accounting server. We like to forward accounting information to firewall for using SSO and authentication based policy on firewall. Is this possib...

8 months ago

P

Peter Extreme Hero

Extreme Control Appliance as accounting proxy for sso

Question

0 471 4

1 year ago

T

Tom Gavin New Member

Permit specific MAC address per port

I am trying to figure out how to enable port security on Extreme Summit 300-24 switches. Cisco provides this as a configurable feature. I don't believe Extreme has a comparable feature so I have been trying to use access lists to perform the same basic function. I have no problem creating the necess...

0 838 4

2 years ago

Hi, how can i join the NAC in a domain? Thanks!

Marlon New Member

how to join NAC in a domain

0 957 6

We are trying to see what our options or for identifying mobile devices by the certificate installed on them. We would be using Intune to push group policy settings and a cert. Currently the NAC is setup with AD connectivity. Can a rule be built to catch devices with a company issued cert and als...

2 years ago

P

Pierre Demassey New Member

Does NAC have the capability to identify company issued devices by the certificate installed on them and can NAC mesh with Intune?

0 525 1

3 years ago

Drew C. Community Manager

Security Notice - VN-2016-001 OpenSSH

This vulnerability notice provides the official technical response from Extreme Networks regarding the OpenSSH vulnerabilities identified in CVE-2016-0777 and CVE-2016-0778. VN-2016-001 – OpenSSH The impacts of these vulnerabilities include possible unauthorized disclosure of information. Custome...

2 398 5

3 years ago

K

Ken Thomas Extreme Alum

New GTAC Knowledge Articles July 12-19, 2015

Here are the new articles that were published last week (July 12 - July 19, 2015) in GTAC Knowledge: Sunday 7/19/2015: none Saturday 7/18/2015 How To Configure Routers at a Main and Remote location Using Static Routes Why does "show stacking-support" in Summit 460 series alternate stack shows stac...

3 482 2

4 years ago

CVE-2015-4000 "LogJam" issue is due to the TLS protocol 1.2 and earlier not properly conveying a DHE_EXPORT choice when a DHE_EXPORT ciphersuite is enabled on a server but not on a client. This allows man-in-the-middle attackers to conduct cipher-downgrade attacks. Extreme Networks response to C...

Weidle, Bert Extreme Employee

VN-2015-007-LogJam

1 318 0

4 years ago

After I upgraded a few NAC Appliances from 5.X to 6.1.X or from 6.1.X to latest 6.1.182 I had sometimes the problem that NAC lost its DNS Server information in the /etc/resolvresolv.conf. After dnetconfig (without changing something) all worked fine again. Does anybody know a reason for that? It d...

Michael Kirchner New Member

DNS Server lost after NAC Upgrade to 6.1.X

Question

1 435 10

4 years ago

We are in the process of deploying multiple wifi controllers with multiple NAC appliances. The client have two core S series switches, NOT virtually bonded. The NAC appliances is being configured in a LSNAT group. Can a second NIC interface on the NAC appliance be configured on the NAC to allow for...

Andre Brits Kannemeyer Extreme Hero

NAC second Nic

Question

0 400 1

4 years ago

Can the NAC GW handle traffic from a GRE tunnel interface of a router at a remote site which is using PBR to direct http trafic from quarantined users to that Tunnel interface? Thank you Carlos

Carlos Silva New Member

NAC GW as destination of GRE Tunnel interface, through WAN, for quarantine PBR traffic

Question

0 305 0

I've configures NAC as an external captive portal in EWC. When the client connects, it gets the Unregistered policy. After registration, the NAC changes the clients policy to Guest Access, but the EWC remains the Unregistered. I need to disassociate the client form the EWC to set the EWC the Guest A...

4 years ago

G

Gabriel Bagita Participator

EWC doesn't changes rule after guest registration

Question

0 554 4

when can we reckon with a statement about the shellshock vulnerabilty ? are there any advises regarding this problem to enterasys / extreme products to bypass the time untill an official statement / patches for the affected products are released?are there products which are for sure not affected ( p...

5 years ago

P

Patrick Graf New Member

shellshock vulnerability

Question

5 398 3

B

5 years ago

Hi there, Does anyone out there have experience of using multiple NAC appliances with the self registration portal in an LSNAT load balancing configuration? I have just added a second NAC appliance to an existing working setup, and configured load balancing for RADIUS auth. The RADIUS side of thin...

Mark Lamond New Member

NAC Load Balancing with Guest Portal

Question

1 439 4

5 years ago

Hi We have implemented Aptilo platform and would like to get help on the settings for sending syslog to our SIEM: Aptilo AC Aptilo CORE 5 - Linux ac1.wificiutada.intra 2.6.18-274.12.1.el5 #1 SMP Tue Nov 29 13:37:35 EST 2011 i686 i686 i386 GNU/Linux Aptilo Access Co...

cos New Member

Aptilo AC/SPA/MAS - Logging syslog Messages to SIEM

Question

0 303 0

5 years ago

Hi I like to receive through syslog to my SIEM the "event logging" generated by a BlueCoat SG810. I already configured the BlueCoat and in my SIEM, in LOG ACTIVITY, this is what appears Event Name:Unknown log event Low Level Category:Unknown Generic Log Event Event Description:Unknown Generic Log-...

cos New Member

BlueCoat SG810 Event Logging - Enterasys SIEM

0 440 0

Hello, the issue is how to deploy IPS system as a failover cluster. Can either EMS or IPS hardware sensor be deployed anyhow for redundancy? Kind regards Thomas

5 years ago

Tomasz Embassador

Dragon IPS system redundancy

Question

0 324 0

5 years ago