NMS Server Authentication Configuration

If you only want to use NMS server authentication, configure the XNV-enabled switches as follows:
configure vm-tracking authentication database-order nms
Configure the NMS server as follows:
1. Add Switch1 and Switch2 as RADIUS clients.
2. Add the MAC addresses for VM1 and VM2 as users, and configure the passwords to match the user names.
3. Add a remote access policy with the Extreme Networks VSAs:
  - Vendor code: 1916
  - VSA ID: 213 (EXTREME_VM_NAME)
    Example: MyVM1
  - VSA ID: 214 (EXTREME_VM_VPP_NAME)
    Example: nvpp1
  - VSA ID: 215 (EXTREME_VM_IP_ADDR)
    Example: 11.1.1.254
  Note
  For the Dynamic VLAN feature, the following VSAs are used:
  - EXTREME_VM_VLAN_ID with VSA ID as 216
  - EXTREME_VM_VR_NAME with VSA ID as 217

The following command configures the switch as an NMS server client:

configure vm-tracking nms primary server 10.127.5.221 client-ip 10.127.8.12 shared-secret secret

After the repository server is configured (see Repository Server Setup), the following commands can be used to display the switch XNV feature status:

 * Switch.33 # show vm-tracking nms server 
VM Tracking NMS : enabled  
VM Tracking NMS server connect time out: 3 seconds
Primary VM Tracking NMS server:  
 Server name   :  
 IP address    : 10.127.5.221  
 Server IP Port: 1812  
 Client address: 10.127.8.12 (VR-Mgmt)  
 Shared secret : qijxou  
 Access Requests   : 7               Access Accepts : 2  
 Access Rejects    : 5               Access Challenges : 0  
 Access Retransmits: 0               Client timeouts : 0  
 Bad authenticators: 0               Unknown types : 0  
 Round Trip Time   : 0

 * Switch.32 # show vm-tracking 
-----------------------------------------------------------  
VM Tracking Global Configuration 
----------------------------------------------------------- 
 VM Tracking                     : Enabled  
 VM Tracking authentication order: nms  
 VM Tracking nms reauth period   : 0 (Re-authentication disabled)  
 VM Tracking blackhole policy    : none  
-----------------------------------------------------------
 Port                        : 21  
 VM TRACKING                 : ENABLED  
 Flags  
 MAC                AP    IP Address      Type     Name  
-----------------------------------------------------------------------------  
 00:04:96:27:c8:23  VB    11.1.1.101      VM       vm_1  
 VPP      nvpp1  
 00:04:96:27:c8:24  VB    11.1.1.102      VM       vm_2  
 VPP      nvpp2  
-----------------------------------------------------------------------------  
 Flags :  
 (A)uthenticated  : L - Local, N - NMS, V - VMMAP  
 (P)olicy Applied : B - Both, E - Egress, I – Ingress  
 Number of Network VMs Authenticated: 1  
 Number of Local VMs Authenticated : 0  
 Number of VMs Authenticated : 1

 * Switch.32 # show policy 
Policies at Policy Server:  
PolicyName ClientUsage Client BindCount  
---------------------------------------------------------------------  
vmt/nvpp1 1 acl 1  
vmt/nvpp2 1 acl 1  
---------------------------------------------------------------------