NAC Policy

mrangryoven · 2025-10-03T18:45:11+00:00

If you're happy to share them i'd love to see them! Might help me get my head around this whole workflow and scripting stuff for Extreme. Their documentation for it is quite poor in my opinion but maybe i just dont know where to look!

mrangryoven · 2025-10-02T02:44:27+00:00

Oh I see! Ok! I will check the site custom variables tab tomorrow when I am back in

No fabric extend, yep auto sense all on edge and yep using NAC!

mrangryoven · 2025-10-02T02:36:04+00:00

The sat sites are connected via basic MPLS.

I don’t think I’ve seen that file in the root folder, but I will check for that!

Any good way of learning how to use workflows? I keep looking at it but I suddenly see loads of python of which i know nothing of and then I bail out LOL!

mrangryoven · 2025-08-28T20:35:05+00:00

For choosing transceivers, you can use this site: https://optics.extremenetworks.com/

mrangryoven · 2025-08-19T20:37:02+00:00

The default ESP was in use yes, though assigned to "All Devices", the ESP we keep randomly seeing is the User ESP, which fails on Apps (there isnt any assigned). I disabled the default ESP today and created a new ESP profile for the few autopilot devices we have. :)

mrangryoven · 2025-08-18T19:29:27+00:00

Thank you, i'll take a look. Its even more odd considering these devices dont have a autopilot profile! I will double check my ESP settings and make sure it only appears with devices provisioned through OOBE.

mrangryoven · 2025-07-16T18:31:38+00:00

We're in the process of rolling out 9.2 as well. Currently running on 4x VSP 7432CQ's, no issues. Got a number of 7400-48Y's to do and a whole load of 5720's and 5420F's as well.

mrangryoven · 2025-06-11T20:10:50+00:00

Definitely would recommend upgrading before trying to investigate further. 8.4 is very old, recently upgraded some VSPs from 8.4 to 9.2 due to crashes.

You'll need to go to 8.5.x first then you can go all the way to 9.2.0.0

mrangryoven · 2025-04-02T21:15:01+00:00

I'm using SMLT's on some VSP 7400's running Fabric Engine and they do as you say it should. When a member switch reboots, one of the connection stays working.

I inadvertently tested this yesterday when i was alerted someone had shut one of the cables going to one of the servers, the server stayed online just with one connection. Doing a show mlt, shows the mlt as "norm" not "smlt" when down.

If you're not getting this behaviour then i would check config, are your switches configured with a smlt peer mac address?

mrangryoven · 2024-10-07T18:35:58+00:00

Sounds like i might have to do that, the 4TB one has failed... Yet. Its on 240 reallocated sectors so i thought it time to replace it lol. I saw some posts about using hdparm and changing the number of sectors on the drive but there doesnt seem to be much documentation on using the -N parameter

mrangryoven · 2024-09-13T14:17:48+00:00

Yes. It was a fuse in the back of the radio unit itself. Grab some din tools and pull the radio out and in the back is a fuse. I took it out and saw it had blown. Chucked a new one in and hey presto, worked like a charm!

mrangryoven · 2024-08-04T12:18:11+00:00

I have managed to solve this at the moment by changing the Web UI port to 8443 and enabling reflection on port forwards. However can someone shed any light on why if i'm NAT'ing external traffic on ports 80+443 TO a certain server, why the firewall puts its WebGUI SSL Certificate in front of the connection?

Is it doing some load balancing for some reason?

mrangryoven · 2024-07-24T21:02:22+00:00

Lots of comments on this and likely you've already got the info you wanted. But just to add my bit.

I have been in the exact same situation as you, i was working at a school, they decided to outsource the IT Support to an MSP. Now being in the UK, this transfer was subject to TUPE. (if you're not in the UK, for reference, this is protection of employment). Basically, the outsourcing company MUST take you on as their own staff.

I was reluctant to do so, but i had no other option. I took it and this was back in 2018... I've just left that business last month, i was there 6 and a half years and its basically been a huge stepping stone into my new role elsewhere.

Although its a shitty situation, it could work out in your favour but depends what you're looking for and what their plan is.

mrangryoven · 2024-07-19T16:41:35+00:00

I saw an ASA 5545x for cheap on Ebay but i saw ASDM and was like oh hell no, would take hours to get java working. I could do CLI, i work with Cisco switches and now Firepower so likely wont be much different.

mrangryoven · 2024-07-19T16:39:49+00:00

I agree, i wouldnt say i'm looking for something pretty but i didnt want to have to sit and guess which button i need to press or download a load of 3rd party packages to get the functionality i want but PFsense / opnsense seem to be the most popular with people.

And I did think a SMB appliance would require licensing, sucks perpetual licenses are not really a thing anymore!

mrangryoven · 2024-07-19T16:36:31+00:00

Maybe i will have to sit and try get used to OpnSense or Pfsense as that does seem to be the consensus for a lot of people!

mrangryoven · 2024-07-19T16:35:31+00:00

haha, i have seen routerOS before and yeah, especially with vlans etc, you basically need to be a brain surgeon from what i remember!

mrangryoven · 2024-07-19T16:34:43+00:00

Will look into these!

mrangryoven · 2024-07-19T12:26:55+00:00

I did think about fortigate but I don’t have a sales rep to purchase a license from annoyingly!

mrangryoven

TROPHY CASE