ExtremeCloud IQ NAC

Network Access Control (NAC) uses a set of protocols to secure devices when they access the network. The 802.1X standard is a basic form of NAC. NAC controls access using policies such as pre-admission endpoint security checks and post-admission controls over access levels, and permissions that devices exercise in the network.

ExtremeCloud IQ NAC licenses are compatible with ExtremeCloud A3 version 4.0 and newer, and ExtremeCloud IQ - Site Engine version 21.9 and newer. When a compatible NAC engine (ExtremeCloud A3 and/or ExtremeCloud IQ - Site Engine) is onboarded to ExtremeCloud IQ, it will appear automatically in the NAC Entitlements table (Global Settings > Administration > License Management > NAC Entitlements).

To modify the number of allocated ExtremeCloud IQ NAC entitlements for a NAC engine, select the serial number for the NAC engine and enter a new number in the Allocated % column. The range is 0-100, with increments of 0.1. ExtremeCloud IQ sends the allocated values to NAC engines.

When you onboard a NAC engine, ExtremeCloud IQ adds the serial number to the NAC Entitlements table using the following logic:

• ExtremeCloud IQ tries to allocate 100% of total NAC licenses from the license pool to the first NAC engine (no user action is required). If the allocation was successful, the value in the Allocated % column is 100%. If the allocation was not successful, the value is 0%.
• ExtremeCloud IQ tries to allocate the remaining percentage (if any) to the next NAC engine. For example, if the allocation for the first NAC engine is 20%, ExtremeCloud IQ tries to allocate 80% to the second NAC engine.

Because the quantity of total NAC licenses can change over time, the allocation is stored as a percentage, but is displayed both as a percentage and as a calculated absolute number.