End Systems MACs collection

[Dan15]

I wonder what is your method to bring all end systems MAC addresses to XMC database? Do you just have EAP enabled on every port? 

I am asking because I want to have this data in XMC for visibility, but I also want to avoid having the NAC dependency in some areas of the network.

[Dan15]

Thank you for the hints!

Unfortunately we are in a ERS/VSP environment and there is no support for identity management 

[James_A]

I use RADIUS with MAC auth, but there are ways to do it without that

https://extremeportal.force.com/ExtrArticleDetail?an=000080009

Bonus to feed from IDM to Netsight https://extremeportal.force.com/ExtrArticleDetail?an=000081388

[StephanH]

Hello Dany,

as Mig wrote authentication  is the key to get all MAC addresses. Extreme Control is a NAC solution and build for authentication. Only via authentication the database is filled.

You can authenticate several MACs on one port and all will be added to XMC. As Mig wrote if you create a permit all rule in Control this works fine without any impact to you network. The number of devices that can be authenticated per port depends on the switch model and vendor.

[Dan15]

Hi Mig,

Thanks for sharing. Do you know how that works if you have several MACs behind a port for example on an uplink to an ESX Server? Will Control add all MACs to the End-Systems database?

I am also looking for a another feasible solution without actually doing authentication on the ports?

Regards