NAC&V2110: unable to change from Admin port to esa0 IP

[Ilya_Semenov]

Hello, team,

I try to follow this article:

https://extremeportal.force.com/ExtrArticleDetail?an=000090139

...and I can't do this:

• EWC Connection: Change from Admin port IP (192.168.10.1) to esa0 IP

IP-address on esa0 was assigned, but I can't select it here - it's absent and only Admin IP is available. Why?

Many thanks in advance,

Ilya
 

[Ostrovsky__Yury]

Ilia , you don't need to use "External" fore redirect. Just use "FF-External" , so you dont need to worry about ports . We keep "External" as an option only as legacy option, just to make sure if the config upgraded from old controllers it will keep working the same way. FF-ECP is way better feature

[Ostrovsky__Yury]

you "don't have to "  Just FF-ECP is a better feature . If you using br@AP as user's topology , then you have to use FF-ECP (External will not work) . If the controller is v10 then enable "Role Based Redirection" (global option on VNS) . The redirection can be done on Role/Rule.

[Ilya_Semenov]

Hello, Yury,

Are you really sure that I have to change it to FF-External?

I've configured connection to LDAP from NAC and almost done with HTML.

But i've no idea what to do next?

I need just authorize users in AD though NAC web page....

[Ronald_Dvorak]

What mode is the ESA0 topology.... physical ?!