Extreme Networks

Guilhem_Lejeune

Hi,I'm trying to send the right RADIUS attributes to apply dynamic ACL on Switch Engine with ExtremeControl.I've done this easily with Fabric Engine, using the %PER_USER_ACL_VOSS% parameter in "RADIUS Attributes to Send" configuration. Also, I create...

Guilhem_Lejeune · 09-30-2024

Hi,I have a pure theory question here.It seems that MAC to IP resolution is mandatory to make ExtremeControl work properly.The most popular technic is to relay DHCP messages toward ExtremeControl and that is what I use in production.What about a new ...

Guilhem_Lejeune · 09-25-2024

Hi,Devices involved :ExtremeCloud IQ Site Engine version 24.2.15.5ExtremeControl version 24.2.15.5Fabric-Engine 5420F-48P-4XE version 8.10.5Windows PCWindows PC first authentication is OK (we use 802.1x PEAP MSCHAPv2).After 10 minutes, ExtremeControl...

Guilhem_Lejeune · 04-02-2024

Hi everyone,I want to share something about an issue I have encountered regarding ZTP+ process, especially the upgrade step.Since recent versions of ExtremeCloud IQ Site Engine (in my case : 24.2.11.12), SCP is the default protocol in ZTP+ process, i...

Guilhem_Lejeune

Hello everyone,Obviously, I haven't read you right : I've forgotten the "configure policy maptable response both" command on my switch.It works !So, to summarize :Radius Attributes to Send : Policy & RFC3580NAC Authorization rule :Role (see below)VLA...

Guilhem_Lejeune

Hi Ryan,I have carefully analyzed what you wrote earlier.Everything is OK on my switch : the Policy is applied and I see the several sub-elements which are related to the service rules in XIQ SE / Extreme Control.My exact problem is : I've defined a ...

Guilhem_Lejeune

Hi,I have a similar problem !1. I've changed the PT configuration to set "Trusted" for "DHCP Snooping"2. I've saved the change3. I've configured (right-clic then Configure) the device to assign the PT to the port (before : <local_settings>)4. Enforce...

Guilhem_Lejeune

Hi Ryan,Thank you for your feedback ! Yes, indeed, something is not operating and I think the ExtremeControl role configuration is involved.After a succesful authentication, the Policy is pushed toward the switch but I did not manage to have :Default...

Guilhem_Lejeune · 10-19-2024

Hi,Thank you for your reply !We use 802.1x PEAP MsCHAPv2 We have a similar configuration except for the usergroup.You use an attribute value "host/*" where we use "objectCategory" as attribute name and "CN=[...],CN=[...],[...],DC=[...],DC=[...]" as ...

Extreme Networks

User Statistics

User Activity

How to apply Dynamic ACL on Switch Engine with NAC

ExtremeControl - MAC to IP resolution question

ExtremeControl - Issue - Unexpected NEAP ReAuth

ExtremeCloud IQ Site Engine - ZTP+ - SCP image download issue (illegal URL)

Re: How to apply Dynamic ACL on Switch Engine with NAC

Re: How to apply Dynamic ACL on Switch Engine with NAC

Re: XIQ-SE unable to change port settings after changing the port template when Configure Device

Re: How to apply Dynamic ACL on Switch Engine with NAC

Re: ExtremeControl - MAC to IP resolution question