gmane.network.enterasys.user

LACP with NAC-A-20

2013-05-17T13:10:20

Hi,

 

I see that NAC-A-20 has 4 NICs. Do you know if it's possible to
aggregate 2 NIC for a 2 Gb bandwidth ?

 

Thanks

 

Geoffroy


---
To unsubscribe from enterasys, send email to listserv< at >unc.edu with the body: unsubscribe enterasys gneu-enterasys< at >gmane.org

AW:

Adam Rainer — 2013-05-15T07:18:02

Hi


You have to enable the „collect data“ in OneView on the interfaces you want to monitor, then you have to create an Alarm in the Netsight Console (Alarms/Events)

There you create a new Alarm with an Alarm Typ “By Threshold” and within there you select for example

[cid:image004.png< at >01CE514D.17EF8D70]

In this case you got an alarm if the utilization passes the 3% mark and delete the alarm under 2%

Then you only have to configure your e-mail settings and that you got an e-mail if this event happens..


You have to know that with it you have only ONE threshold to set over all Interfaces where you collect data’s…..







Mit freundlichen Grüßen / Best regards

Rainer ADAM
System Engineer


Imtech ICT Austria GmbH
Guglgasse 15
Bauteil 3, 4. Stock
A-1110 Wien

T: +43 51715 4830
F: +43 51715 99 4830
M: +43 664 851 4830
rainer.adam< at >imtech.at<mailto:rainer.adam< at >imtech.at>

[Beschreibung: https://webmail.imtech.at/logos/imtech.jpg]

Imtech ICT Austria GmbH

Re: IPv6 => bridged< at >HWC ?

2013-05-13T16:02:51

Thanks for the info! I´m really looking forward to it :-)
Michael

Am 13.05.2013 02:37, schrieb James Andrewartha:


---
To unsubscribe from enterasys, send email to listserv< at >unc.edu with the body: unsubscribe enterasys gneu-enterasys< at >gmane.org

Re: IPv6 => bridged< at >HWC ?

James Andrewartha — 2013-05-13T00:37:11

http://www.excivity.com/ComputeCycle/late-ipv6-at-shmoocon-but-why/
suggests it'll be in 8.31, which is a month or two away I believe.

Re:IPv6 => bridged< at >HWC ?

2013-05-12T17:34:55

Hi again,

till now I added VLANs for each building/floor a user needed IPv6 and 
bridged that traffic locally. It works but it´s kind of "ugly".

To cut a long story short: does anyone have any news about CAPWAP+IPv6 
support?

Michael


-----Original message-----
Subject: Re:[enterasys] IPv6 => bridged< at >HWC ?
Sent: Thu, 20 Sep 2012 10:01:18 +0100
From: William Aguilar <waguilar< at >enterasys.com>
To: enterasys< at >listserv.unc.edu
To: Enterasys Customer Mailing List <enterasys< at >listserv.unc.edu>



It is on the roadmap but it is not committed to a release.

Thx

Will

/Sent from my MOTOROLA ATRIX™ 2 on AT&T/


-----Original message-----

    *From: *Michael Muller <excelsio< at >gmx.com <mailto:excelsio< at >gmx.com>>*
    To: *Enterasys Customer Mailing List <enterasys< at >listserv.unc.edu
    <mailto:enterasys< at >listserv.unc.edu>>*
    Sent: *Thu, Sep 20, 2012 07:35:12 GMT+00:00*
    Subject: *Re:[enterasys] IPv6 => bridged< at >HWC?

    Hello,

    for now we can IPv6 traffic bridge locally< at >access points and have
    IPv6 ma

Re: Wired 802.1x

John Kaftan — 2013-05-10T10:32:58

Thanks I will try that.  I have tried this from two very different laptops,
an older dell and a newish HP so I wasn't thinking drivers.  I will give
that a try.

Thanks

John


On Thu, May 9, 2013 at 2:07 PM, <djohnson< at >fhsu.edu> wrote:

Re: Wired 802.1x

John Kaftan — 2013-05-10T10:30:17

Thanks.  Yes that is what I am doing.  I have it set for 802.1x first and
then Mac auth.  So if the client fails 802.1x they will get sent to NAC so
I will be OK.

It's just stuck in my craw that this thing won't work especially when it
works fine on wireless.  I've seen others struggling with 802.1x on the
wired side too during my research.  I would say 802.1x is fully baked on
wireless (accept on Macs of course) so why is it funky on wired?


On Thu, May 9, 2013 at 1:35 PM, Brian Anderson - ASI <
Brian< at >arcadiasecureit.com> wrote:

Re: Wired 802.1x

2013-05-09T18:07:00

Pulling from some dusty mental archives, I recall something similar in our 
network: some refreshed Dell GX270 and some new GX620 models wouldn't 
authenticate, and never even prompted for credentials.  We discovered the 
issue was related to the built-in Windows 7 drivers for their respective 
NICs.  Upgrading to the latest version from Broadcom's website corrected 
the problem.

I hadn't seen any mention here of drivers, so thought I'd pass along my 
experience.

Derek Johnson | Data Communications Coordinator
FORT HAYS STATE UNIVERSITY
415 Lyman Dr. TH 101, Hays, KS 67601
(785) 628 - 5688 | djohnson< at >fhsu.edu





From:   Karl Gerling <gerling< at >enterasys.com>
To:     "Enterasys Customer Mailing List" <enterasys< at >listserv.unc.edu>
Date:   05/09/2013 12:58 PM
Subject:        Re: [enterasys] Wired 802.1x



I have seen behavior like this if the client is set to the default of "use 
smart card".  Check that the client is set to PEAP.  

Karl Gerling
Senior Solutions Engineer
Entera

Re: Wired 802.1x

Karl Gerling — 2013-05-09T17:56:43

I have seen behavior like this if the client is set to the default of "use
smart card".  Check that the client is set to PEAP.

Karl Gerling
Senior Solutions Engineer
Enterasys Networks

http://about.me/Karl.Gerling

On May 9, 2013, at 1:31 PM, John Kaftan <jkaftan< at >utica.edu> wrote:

Yes I have tried that.  I don't believe I see anything when it fails.  I
will look again and will also check the syslog.


On Thu, May 9, 2013 at 1:26 PM, Herzog, Gerald <gherzog< at >enterasys.com>wrote:

Re: Wired 802.1x

Brian Anderson - ASI — 2013-05-09T17:35:11

Another option would be to use policy based routing and tagging traffic with the Unregistered role to redirect client http traffic to nac captive portal to authenticate.  This way the non domain clients won't have to configure their pcs for 8021x.

On May 9, 2013, at 12:31 PM, "John Kaftan" <jkaftan< at >utica.edu<mailto:jkaftan< at >utica.edu>> wrote:

Yes I have tried that.  I don't believe I see anything when it fails.  I will look again and will also check the syslog.


On Thu, May 9, 2013 at 1:26 PM, Herzog, Gerald <gherzog< at >enterasys.com<mailto:gherzog< at >enterasys.com>> wrote:
Is there any username that is populated in NAC when it fails authentication?  Have you tried specifying "user authentication"?
<image.png>


On Thu, May 9, 2013 at 1:17 PM, John Kaftan <jkaftan< at >utica.edu<mailto:jkaftan< at >utica.edu>> wrote:
It works for me if I go into the network settings and save my credentials.  It also works if I have a machine that is in the domain and I check "Automatically use my Windows logon name and passwo

Re: Wired 802.1x

John Kaftan — 2013-05-09T17:30:45

Yes I have tried that.  I don't believe I see anything when it fails.  I
will look again and will also check the syslog.


On Thu, May 9, 2013 at 1:26 PM, Herzog, Gerald <gherzog< at >enterasys.com>wrote:

Re: Wired 802.1x

Herzog, Gerald — 2013-05-09T17:26:39

Is there any username that is populated in NAC when it fails
authentication?  Have you tried specifying "user authentication"?
[image: Inline image 1]


On Thu, May 9, 2013 at 1:17 PM, John Kaftan <jkaftan< at >utica.edu> wrote:

Re: Wired 802.1x

John Kaftan — 2013-05-09T17:17:25

It works for me if I go into the network settings and save my credentials.
 It also works if I have a machine that is in the domain and I check
"Automatically use my Windows logon name and password".  That will cover
90% of my cases.

However, if a machine is not on the domain and connects I expect that I
should be prompted by the supplicant to provide credentials.  That is the
part that is not working.

Thanks

John


On Thu, May 9, 2013 at 12:08 PM, Kay Avila <kay.avila< at >uni.edu> wrote:

Re: Wired 802.1x

Kay Avila — 2013-05-09T16:08:44

John, we've only done limited testing, but so far, authenticating with 
802.1x AD machine accounts on Windows 7 has worked successfully for us. 
  Just a thought.

On 5/7/2013 6:31 PM, John Kaftan wrote:

---
To unsubscribe from enterasys, send email to listserv< at >unc.edu with the body: unsubscribe enterasys gneu-enterasys< at >gmane.org

"Threats" within OneView

2013-05-09T08:24:18

Hi,

I recently upgraded to release 8.21 on my controllers and Netsight Suite 
4.4 and discovered the new "radio" button. It´s nice to have some threat 
detection even on my AP36XX series.

When I start OneView and go to "Wireless" there´s also a new "Threats" 
display, where I can all discovered events.
The strange problem is the "APs" column. On most of the displayed lines, 
there´s no entry within access point which reported that threat. Well on 
some of them there´s the name of the access point displayed, but really 
on few.

So I´m asking myself what I can do to fix this?

Michael

---
To unsubscribe from enterasys, send email to listserv< at >unc.edu with the body: unsubscribe enterasys gneu-enterasys< at >gmane.org

RE: Wired 802.1x

John Kaftan — 2013-05-07T23:31:05

Actually it does work when I have that set.  I tried that earlier today.
Often in a university though machines are on the network that are not part
of the AD domain, like the first two I was working with.  Its crazy that
Windows won't respond the the first eap packet from the switch unless
credentials are configured to be provided automatically.  Wireless prompts
just fine.  I did some research and it seems that 802.1x on wired is still
unreliable.  I found 7 patches to install and it still doesn't work right.
I wonder why wireless is fine but wired isn't.  The protocol has been
around since 2002 or so.  It should be fully baked by now.

John
On May 7, 2013 7:11 PM, "Robert Perry" <roperry< at >enterasys.com> wrote:


---
To unsubscribe from enterasys, send email to listserv< at >unc.edu with the body: unsubscribe enterasys gneu-enterasys< at >gmane.org

RE: Wired 802.1x

Robert Perry — 2013-05-07T23:11:20

Have a look at this document,  it may help.   Specifically look at section
1.1.10 -  This would seem what “MIGHT” be missing ?      How are you
disconnecting and reconnecting from the network ?   Are you unplugging the
cable ?   If you actually logout, you should get prompted for a new
login.



Best of luck !



Best Regards,

Bob Perry







*From:* John Kaftan [mailto:jkaftan< at >utica.edu]
*Sent:* Tuesday, May 07, 2013 2:43 PM
*To:* Enterasys Customer Mailing List
*Subject:* Re: [enterasys] Wired 802.1x



That's not good.  I want to keep Admin-Edge.  I do have 802.1x listed as
first.  802.1x is working just fine if I store my credentials within the
supplicate.  My only problem is that I cannot get prompted by Windows.



On Tue, May 7, 2013 at 1:34 PM, Brian Anderson - ASI <
Brian< at >arcadiasecureit.com> wrote:

There may be some switch config settings that might help.  Try setting
8021x as first in priority for authentication.  I also have seen admin-edge
enabled on the end system port (spantree) cause 8

Re: Wired 802.1x

Brian Anderson - ASI — 2013-05-07T18:51:10

I would try turning it off one port and see if it works. I have a case open with GTAC on this issue.  If you have the same problem you should be able to link up with that case?

On May 7, 2013, at 1:43 PM, "John Kaftan" <jkaftan< at >utica.edu<mailto:jkaftan< at >utica.edu>> wrote:

That's not good.  I want to keep Admin-Edge.  I do have 802.1x listed as first.  802.1x is working just fine if I store my credentials within the supplicate.  My only problem is that I cannot get prompted by Windows.


On Tue, May 7, 2013 at 1:34 PM, Brian Anderson - ASI <Brian< at >arcadiasecureit.com<mailto:Brian< at >arcadiasecureit.com>> wrote:
There may be some switch config settings that might help.  Try setting 8021x as first in priority for authentication.  I also have seen admin-edge enabled on the end system port (spantree) cause 8021x to fail also.

Thanks,

Brian Anderson
Brian< at >ArcadiaSecureIT.com<mailto:Brian< at >ArcadiaSecureIT.com>
Network Engineer
3000 United Founders Boulevard, Suite 212
Oklahoma City, Oklahoma  73112
C

Re: Wired 802.1x

John Kaftan — 2013-05-07T18:42:59

That's not good.  I want to keep Admin-Edge.  I do have 802.1x listed as
first.  802.1x is working just fine if I store my credentials within the
supplicate.  My only problem is that I cannot get prompted by Windows.


On Tue, May 7, 2013 at 1:34 PM, Brian Anderson - ASI <
Brian< at >arcadiasecureit.com> wrote:

Re: Wired 802.1x

John Kaftan — 2013-05-07T18:35:08

Yes


On Tue, May 7, 2013 at 12:26 PM, Patrick Printz <pprintz< at >qcc.mass.edu>wrote:

Re: Wired 802.1x

2013-05-07T17:40:20

John,

I have a few questions for you:

1. Are your authenticating the user or computer with your 802.1x 
deployment?

2. Are these domain or non-domain computers?

3. Do you have the Nic configured for using User or Computer 
authentication(based on your answer from question 1)?

4. Is your AD running on 2008 or 2008 R2?  Because you can pust these 
setting very easily to your domain computers running Win 7.

Thanks,

Jason Rearick
Senior Network Engineer
Home Office: Info Center
Utica National Insurance Group
P.O. Box 530
Utica, NY 13503

Email: jason.rearick< at >uticanational.com
Phone:315-734-2704



From:   John Kaftan <jkaftan< at >utica.edu>
To:     "Enterasys Customer Mailing List" <enterasys< at >listserv.unc.edu>
Date:   05/07/2013 12:16 PM
Subject:        [enterasys] Wired 802.1x



Working to get 802.1x going on Win 7 wired ports.  I have it working if I 
save my credentials in Windows.  If I don't save my credentials Windows 
never prompts me for credentials.  Packet captures suggest that the client 
never re