Trying to setup IDM and failing

[Stephen_Stormon]

We have Extreme Management Console and ExtremeControl and we want to start off by just collecting information on what all is connected to the network, but not enforcing any policies at this point. The first step is to select the device, right-click on it, click Tasks -> Access Control -> Identity Management - Configuration, correct?

We then changed the target server IP address setting to the IP of the NAC server, changed the target server type to NAC, but then things fall apart at the username and PW. We tried using the root account that was created when NAC was installed, but that doesn't work. Looking on the switch, it shows:

Slot-2 Summit-CV-Desktops.9 # show xml-notification statistics
Target Name : nac-target_172.22.1.94
Server URL : https://172.22.1.94:8443/axis/services/event
Server Queue Size : 100
Enabled : yes
Connection Status : fail
Events Received : 3
Connection Failures : 2
Events Sent Success : 0
Events Sent Failed : 3
Events Dropped : 0

Going to that link brings up a login prompt, but the root account credentials on the NAC don't work to login. I'm guessing that is where the problem is, but I don't know at this point.

[TylerMarcotte]

For the $serverIP are you using the NAC Server or the XMC Server? I've only ever tried it going directly to XMC.

[Stephen_Stormon]

Yes, those are what I have attempted with no luck.

To confirm (based on https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configured-Identity-Management-for-...), the target server is the IP of the NAC server and the target username/PW can be the "root" account on the NAC server (or do you use the account on the XMC server)?

[TylerMarcotte]

Stephen, you would use the root account for the XMC server, not the username/password of the NAC server.

[Michal_Rz]

Check this:
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-use-EXOS-and-IDM-to-see-end-systems...
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configured-Identity-Management-for-...