Execute a script when a rule is used

[Gaspard_W]

Hello,

I'm working with NAC and so netlogin.

We have a need to have a switch plugged on another one without having to disable the netlogin but it looks like it's impossible.

We tried numerous setup, and the only one that is working, is to make the second switch linked with a trunk port.
As every port on the network has netlogin enabled by default, I would like to know if there is a way to disable it and make the edge port, a trunk port with all the VLANs on it.

I was wondering, is it possible to call a script and execute it when a specific rule / policy is used ?
This script would basically disable netlogin on that port and put all the VLANs, basically changing it from a end user type port, to a trunk type port.
I know we can do that by hand, through OneView and it works fine, but it's not very efficient in our setup.

Thanks
Gaspard

[Gaspard_W]

I'm going to test with authentication instead of device detect, I'll keep you updated.

[Matthew_Helm1]

That makes sense. However, I would consider using authentication/de-authentication as triggers and then set up MAC authentication in parallel with dot1x authentication whereby a MAC-list filter is used to authenticate Extreme switches (when receiving their first EDP packet). (Per my example above.) The complexity comes in determining if the port connecting to an Extreme switch should be a member or a master port of a LAG.

[Kevin_Kim]

I think it would work if netlogin authentication failure vlan or guest vlan is enabled/configured. Once authentication fails, a port will be moved to a quest vlan and LLDP or EDP neighbor would show up.

[Gaspard_W]

Hello everyone,

I'm testing how to use UPM, and what are the problems that are related to it.

Is there a way to have the UPM script execute when netlogin is enabled on that port ? Seems like netlogin prevents the script from being executed, but when disabled, the UPM triggers correctly.

Thanks

[André_Herkenrat]

this definetely looks like a LLDP thing. Have a look at the generic phone UPM in the User Guide.
this should be a good start to begin with