cancel
Showing results for 
Search instead for 
Did you mean: 

Extreme A3 not add filter-id to returned attributes

Extreme A3 not add filter-id to returned attributes

Anonymous
Not applicable

Hi,

Currently following the ‘A3 Installation and Usage Guide’, Use Case 2: Active Directory Authentication.

Clients are able to connect, but they don’t seem to be getting their correct profiles even though A3 says all is working.

The other odd think is that on my iphone that I am testing with, when it connects the dial next to the SSID keeps turning although it does get an IP, connects to the WiFi and I can reach the internet - assume its related to this issue?

Best I can determine is that the A3 simply isn’t adding the filter-id attribute, see below:

5c526d5cfaeb4a1a87af33f58815dbcc_7d2c1ccf-b85d-4cb2-ac1a-3b7cf9e9637f.png

 

As can be seen below when I do a test with the kronususer2 account that belongs to the sales group in AD it correctly hits the A3SaleRole

5c526d5cfaeb4a1a87af33f58815dbcc_ba5cd8e4-4e90-4e6a-a5ab-8c91033ee436.png

Here is the rule configuration:

5c526d5cfaeb4a1a87af33f58815dbcc_66b7d17a-dc55-4398-8c09-9eeb90a485c5.png

The IP address of the AP I am testing with is 192.168.1.10, so here is the device configuration where the filter attributes are set:

5c526d5cfaeb4a1a87af33f58815dbcc_96522a2f-61da-485b-b208-a128f8a6eea5.png

So hence everything's seems to matching up, hitting the correct rule but the filter isn’t being added as can be seen from the Radius attribute, possibly because the ‘Device’ isn’t matching up?

Here is the AP IP in ExtremeIQ that matches subnet range configured in ‘Device’

5c526d5cfaeb4a1a87af33f58815dbcc_ec63ec41-8cf3-4053-a49c-fb1d664d1e43.png

 

Just to add I am using the A3 also with Guest captive portal and the RADIUS exchange is passing filter-id attributes, so it does seem like a common ‘Radius’ type of configuration.

Hoping someone has some ideas?

Many thanks in advance.

Cheers,

Martin

1 ACCEPTED SOLUTION

Anonymous
Not applicable

Used these settings in the connection profile and it started working:

 

4dd5e54847f443d89551b6223866953a_7ecb58b5-17de-411e-8859-34b57aa78c10.png

 

4dd5e54847f443d89551b6223866953a_b3c2669c-838f-48d2-b07f-53f9f95fc94b.png

 

View solution in original post

1 REPLY 1

Anonymous
Not applicable

Used these settings in the connection profile and it started working:

 

4dd5e54847f443d89551b6223866953a_7ecb58b5-17de-411e-8859-34b57aa78c10.png

 

4dd5e54847f443d89551b6223866953a_b3c2669c-838f-48d2-b07f-53f9f95fc94b.png

 

GTM-P2G8KFN