EasyManua.ls Logo

Extreme Networks Summit WM3000 Series - Configuring the NAC Exclusion List

Extreme Networks Summit WM3000 Series
513 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Loading...
Network Setup
Summit WM3000 Series Controller System Reference Guide160
4 Map the selected list item with as many WLANs as needed (be selecting the WLAN’s checkbox). Use
the Select All button to associate each WLAN with the selected list item.
5 To remove the WLAN Mappings, select the Deselect All button to clear the mappings.
6 Refer to the Status field for a display of the current state of the requests made from the applet.
Requests are any “SET/GET” operation from the applet. The Status field displays error messages if
something goes wrong in the transaction between the applet and the controller.
7 Click OK to save and add the new configuration and close the dialog window.
8 Click Cancel to close the dialog without committing updates to the running configuration.
Configuring the NAC Exclusion List
The controller provides a means to bypass NAC for 802.1x devices without a NAC agent. For Motorola
handheld devices (like the MC9000) which are supported by the Extreme Networks Summit WM3000
series controller, authentication is achieved using an exclusion list.
A list of MAC addresses (called an exclusion list) can be added to each WLAN. Each has a separate
configuration for the Radius server (which only conducts EAP authentication). An exclusion list is a
global index-based configuration. An exclusion list can be configured and associated to any WLAN.
If a device’s MAC address is not present in an exclusion list, it will go through the NAC server (LAN
enforcer) and thereby a 802.1x host integrity check. For every WLAN configuration, there are two
separate EAP servers (Radius and NAC).