cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 

Enabled identity management and now we see usernames but have lost port display string and switch nickname

Enabled identity management and now we see usernames but have lost port display string and switch nickname

Stephen_Stormon
Contributor
We have a x440-G2 stack on which we just enabled identity management. Now in the Extreme Management console, we see the username populated but the "Switch nickname" and display string (in the "Switch Port" column) are no longer shown. In the image below, lines 1, 4, 5, and 6 are users who have logged in since we made the change and their user name is shown but not the other information. Lines 2 and 3 show users who logged in before the change and their user name isn't shown but the switch nickname and information from the port are. Is that the intended behavior?

bd6c6f8262f3444fafa216e53b942eb1_9f793bfc-8eee-4c2c-bcc9-525a65f6ffc2.png



We have the one Extreme Management Console (IP ends in .93) and two NAC servers (IPs end in .94 and .46). Setting up Identity Management as a "netsight" target to the XMC console couldn't connect, but creating a nac-target worked. Creating a nac-target to one of our NAC servers was able to connect, but we weren't seeing any usernames displayed in the XMC console with that configuration.

* Slot-1 Summit-CV-Desktops.9 # show xml-notification configuration

Target Name : nac-target_xxx.yy.zz.93
Server URL : https://xxx.yy.zz.93:8443/axis/services/event (VR-Default)
Server User Name : root
Enabled : yes
Queue Size : 100
Connection Status : connected
Source IP Address : any local VLAN IP address
Configured Modules : idMgr
3 REPLIES 3

Zdeněk_Pala
Extreme Employee

The best way is to configure IEEE 802.1x

The second best way is to configure kerberos snooping or identity management feature on EXOS.

 

Regards Zdeněk Pala

Stephen_Stormon
Contributor

Hmm, I opened a ticket about this and the person I was working with did not think that was the issue.  Even stranger is that we just upgraded XMC to 8.3.2.11 and now we are back to where we began (usernames arenā€™t being shown, switch nickname is show,n, and the full port display string is shown).  We still have identity management enabled, so I have no idea why the upgrade to XMC broke that.  Is enabling identity management the correct way to display the name of the user logged into the PC? 

Zdeněk_Pala
Extreme Employee

Why you are mixing NAC and Identity Management?

Identity management does report switch port not alias = it is expected behavior.

Regards Zdeněk Pala
GTM-P2G8KFN