Netlogin and spanning tree
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎07-27-2017 05:09 AM
I'd like to assign a port to a vlan based on a device type. On a switch I've configured netlogin with mac authentication. It's working fine until the NAC doesn't want to assign a port to a vlan, which is part of a spanning tree. It is not working at all. Is it a normal behavior?
5 REPLIES 5
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎07-27-2017 10:33 AM
Do you get an error? Are you using Extremes NAC (NetSight)? Are you using RFC3580?
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-NAC-to-work-with-RFC3580-...
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-NAC-to-work-with-RFC3580-...
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎07-27-2017 10:33 AM
Hello Jeremy,
you advice helped me. The problem was in the wrong RADIUS Attributes profile. The correct profile is the Extreme Netlogin - Vlan Name profile, as I've written it before. Thanks a lot.
you advice helped me. The problem was in the wrong RADIUS Attributes profile. The correct profile is the Extreme Netlogin - Vlan Name profile, as I've written it before. Thanks a lot.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎07-27-2017 10:33 AM
Hi Jeremy,
thanks for the advice. We're using Extreme NAC as you're writing and the X440 Series switches. In the NAC we are using the Extreme NetLogin - VLAN ID RADIUS Attributes profile which is working with VLANS, which are not a part of a SPT domain. But I think, the correct RADIUS Attributes profile should be the Extreme NetLogin - Vlan Name profile. I'm going to try it. I'll see if it help.
thanks for the advice. We're using Extreme NAC as you're writing and the X440 Series switches. In the NAC we are using the Extreme NetLogin - VLAN ID RADIUS Attributes profile which is working with VLANS, which are not a part of a SPT domain. But I think, the correct RADIUS Attributes profile should be the Extreme NetLogin - Vlan Name profile. I'm going to try it. I'll see if it help.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎07-27-2017 10:17 AM
Are you on EXOS 22.2 It added STP support for Netlogin on dynamic vlans.
http://documentation.extremenetworks.com/release_notes/ExtremeXOS/22.2/EXOS_Release_Notes/22.2/c_stp...
http://documentation.extremenetworks.com/release_notes/ExtremeXOS/22.2/EXOS_Release_Notes/22.2/c_stp...
