Extreme Networks

James_A

I'm onboarding a VOSS switch, and it only allows syslog udp-port between 514 and 530, so when I tried to push out my network policy that has a port of 1514, it fails. So I made a new syslog server, port 514, and wanted to use classification rules to ...

James_A · 01-12-2023

I'm tossing up how to do VLAN mapping, is it better to do it in the RADIUS policy mapping in ExtremeControl, or set up policy profiles on the switch and return Filter-IDs?It's a small environment, about 30 switches, a mix of B5 (going to be replaced ...

Show user role · 07-27-2022

I'm trying to hook up XIQ with a ClearPass guest portal, and I can't work out how to show which user profile the station has been assigned. I have user profile assignment based on a RADIUS attribute from MAC auth (Login-LAT-Port because I still have ...

James_A · 03-14-2022

I've put this in the general switching and routing section because I'm dealing with EOS, EXOS and VOSS. I want to apply QOS to voice packets. For our sins we use CUCM, but some users (whose phones are connected to an X440-G2) are hearing brief audio ...

James_A · 10-15-2021

Is there an easy way to push out an SSH key to EXOS devices managed by XIQ, or should I just include it in a supplemental CLI?

James_A

You can do EAP-TLS with user certificates. There is the question of how to get the user certificate on the device that hasn't joined the network yet, there are a few different ways of doing this - wired network, onboarding wifi network.If you have XI...

James_A

A3 supports Azure AD password authentication, but it requires disabling MFA.Certificates issued by Intune are the best solution (to do EAP-TLS auth), but requires an external CA. AD CS is an option, but SCEPman or SecureW2 are what I often see. Packe...

James_A

Is this still the case? I can't see a disconnect button when I try now. Although right-clicking does nothing, just brings up the browser right-click menu, only left-click works.

James_A

The release notes for IQ Engine 10.5r4and XIQ version 23r1 both list AP1130 as supported so there should be firmware available.

James_A · 02-22-2023

Does ISE do a CoA after authenticating the user? If so, what attributes is it sending back? In the user access settings you probably need to apply a different user profile based on the RADIUS attributes. Here's an example:

Extreme Networks

User Statistics

User Activity

Classification rules by device type

Policy maptable vs VLAN authorization

Show user role

Managing QoS for voice traffic

SSH key for EXOS devices in XIQ

Re: AzureAd and dot1X

Re: AzureAd and dot1X

Re: Disconnect a wireless client device from EIQ?

Re: AP1130 and AP650(AH) firmware divergence?

Re: XIQ and Cisco ISE Guest portal