NMS Server Authentication Configuration

If you only want to use NMS server authentication, configure the Extreme Network Virtualization (XNV)-enabled switches as follows:
configure vm-tracking authentication database-order nms
Configure the NMS server as follows:
1. Add Switch1 and Switch2 as RADIUS (Remote Authentication Dial In User Service) clients.
2. Add the MAC addresses for VM1 and VM2 as users, and configure the passwords to match the user names.
3. Add a remote access policy with the Extreme Networks VSAs:
  - Vendor code: 1916
  - VSA ID: 213 (EXTREME_VM_NAME)
    Example: MyVM1
  - VSA ID: 214 (EXTREME_VM_VPP_NAME)
    Example: nvpp1
  - VSA ID: 215 (EXTREME_VM_IP_ADDR)
    Example: 11.1.1.254
  Note
  For the Dynamic VLAN (Virtual LAN) feature, the following VSAs are used:
  - EXTREME_VM_VLAN_ID with VSA ID as 216
  - EXTREME_VM_VR_NAME with VSA ID as 217

The following command configures the switch as an NMS server client:

configure vm-tracking nms primary server 10.127.5.221 client-ip 10.127.8.12 shared-secret secret

After the repository server is configured (see Repository Server Setup), the following commands can be used to display the switch XNV feature status:

 * Switch.33 # show vm-tracking nms server 
VM Tracking NMS : enabled  
VM Tracking NMS server connect time out: 3 seconds
Primary VM Tracking NMS server:  
 Server name   :  
 IP address    : 10.127.5.221  
 Server IP Port: 1812  
 Client address: 10.127.8.12 (VR-Mgmt)  
 Shared secret : qijxou  
 Access Requests   : 7               Access Accepts : 2  
 Access Rejects    : 5               Access Challenges : 0  
 Access Retransmits: 0               Client timeouts : 0  
 Bad authenticators: 0               Unknown types : 0  
 Round Trip Time   : 0

 * Switch.32 # show vm-tracking 
-----------------------------------------------------------  
VM Tracking Global Configuration 
----------------------------------------------------------- 
 VM Tracking                     : Enabled  
 VM Tracking authentication order: nms  
 VM Tracking nms reauth period   : 0 (Re-authentication disabled)  
 VM Tracking blackhole policy    : none  
-----------------------------------------------------------
 Port                        : 21  
 VM TRACKING                 : ENABLED  
 Flags  
 MAC                AP    IP Address      Type     Name  
-----------------------------------------------------------------------------  
 00:04:96:27:c8:23  VB    11.1.1.101      VM       vm_1  
 VPP      nvpp1  
 00:04:96:27:c8:24  VB    11.1.1.102      VM       vm_2  
 VPP      nvpp2  
-----------------------------------------------------------------------------  
 Flags :  
 (A)uthenticated  : L - Local, N - NMS, V - VMMAP  
 (P)olicy Applied : B - Both, E - Egress, I – Ingress  
 Number of Network VMs Authenticated: 1  
 Number of Local VMs Authenticated : 0  
 Number of VMs Authenticated : 1

 * Switch.32 # show policy 
Policies at Policy Server:  
PolicyName ClientUsage Client BindCount  
---------------------------------------------------------------------  
vmt/nvpp1 1 acl 1  
vmt/nvpp2 1 acl 1  
---------------------------------------------------------------------

Published March 2020prev | next

Email this topic

Print this page Print this page

Leave feedback Feedback