Skip to content

Latest commit

 

History

History
88 lines (75 loc) · 21.1 KB

File metadata and controls

88 lines (75 loc) · 21.1 KB

How To

Workflows are available from XMC version 8.1.5 as beta feature. Fully supported in XMC version 8.2 GA

  • Import the sctript = In the Extreme Management Center OneView -> Tasks -> Workflow -> Import...

Extreme Management Center Reporting Workflows

Workflow name Description Comment Version
Aggregated report Device Down This workflow creates aggregated report over the time. Instead of 300 emails if 300 devices goes down, you will get one email with list of 300 devices. Create Alarm for Device Down based on contact lost and as action assign this workflow. You can define the aggregation time in minutes in the workflow Input. Define email recipients. 8.4.2.38v14
Link Aggregate Alarm This workflow creates one email for each link down event. Instead of 2 emails if link goes down, you will get one email with all link details. Create Alarm for Link Down based on selected trap (you can copy or modify original alarm) and as action assign this workflow. Define email recipients. 8.4.0.115v8
ERS inventory This workflow creates one email with CSV file attached. All ERS devices are there with IP, serial numbers and many details. Select ERS devices. Check your ERS devices do have defined Network OS. 8.4.1.23v108

Extreme Management Center Troubleshooting Workflows

Workflow name Description Comment Version
Uptime and Tech Support Checks the uptime of each device (families: Wireless Controller, VSP, Summit Series, Catalyst, Extreme Access Series, VDX). If the uptime is lower then configured value and the device is not in maintenance then the workflow gathers tech support information and send email. Add XMC to devices with proper CLI credentials. Configure variables and email destination. 8.4.0.115v87
Gather Show Support Workflow gathers show support information from devices (families: Wireless Controller, VSP, Summit Series, Catalyst, Extreme Access Series, VDX). Workflow should be executed by alarm or with right click on the device. Workflow genearates email with attached tech support. Configure the email destination. Create Alarm to execute this workflow. Add XMC to the database with CLI credentials or define XMC credentials in variables. 8.4.0.115v27

Extreme Management Center Provisioning Workflows

Workflow name Description Comment Version
Export Site Structure Exports Site structure to the file or email. Inputs: FileName including full path, email address is optional. 8.4.1.24v1
Import Site Structure Automatically creates sites and subsites based on input file Inputs: File with site names. Parent site must exist. 8.2.5.50v2
Import Devices Import devices to the database based on input file Inputs: File with devices. The file contains IP,NickName,Site,Profile. The workflow finishes quickly, added devices will start to appear in the XMC sequentially. 8.2.6.5v3
Import VLANs Import VLANs to the Site based on input file Inputs: File with VLANs. The file contains VlanID,VlanName. Chose method ADD (fails if the vlan exist) or REPLACE (if does not exist then it creates the vlan). Specify the Site. 8.3.0.106v3
Import VRFs and VLANs and Services from VSP Workflow reads VRFs, VLANs, L2VSN, L3VSN from VSP and import it to Service Defintions. Inputs: Service Application, VSP device or XA. The Service Definition is determined automatically = VSP must be assigned to the site with Service Definition. 8.4.0.107v37
Import End-Systems to XCA This workflow reads the CSV file with MACs and descriptions. The workflow injects the content of the CSV file to end-system group in Extreme Cloud Appliance through the API. The XCA must be in XMC and must have CLI credentials defined. The end-system group must exist. Maximum number of entries in one run is 100 for XCA verion 04.36.02.0014 Inputs: File with End-systems. The file contains MAC,description. 8.3.0.111v4
Import L2VSNs to XMC Imports VLANs and L2VSNs from file to XMC Service Definitions and Service Applications. If Service Definition does not exist then it is created. If Service Application does not exist then it is created. If Vlan ID exists then it is updated. If NSI exists then it is updated. The goal is: You do not need to manually create each VLAN and ISID in XMC. Inputs: File with Services 8.3.1.9v7
Create Device Groups from Sites Based on the Site structure user groups will be created. Workflow stops if there is a name conflict: if group with the same name already exists. Backup of the XMC is strongly recommended before the workflow execution. Name of each site must be unique. Restart of XMC is mandatory after the workflow execution. 8.4.0.115v25
Change EXOS policy Rule model This workflow adress incompatibility of EXOS 30.5 with Policy Manager in XMC 8.4 and older. KB article. The workflow can be executed through ZTP+ process or manualy. CLI access must work, Policy domain must be assigned. ZTP+ settings 8.4.3.10v29

Extreme Management Center daily job Workflows

Workflow name Description Comment Version
Send System Time by Email Gather system time from group of EXOS devices sequentially and aggregated result is sent by email. Configure the email recipients before executing. 8.2.1.56v22
Update Device Notes - Group Membership The workflow does modify device property to reflect groups the device belong to. Modify the Inputs to define what property you want to modify and what prefix you want to use. Run the workflow and save it as task. Schedule the task for periodic execution. 8.2.4.24v13
Assign Device to User Device Group based on SysObjectID Automatically assigns device to the user device group based on SysObjectID. All devices of the same type will be in the same user device group. Inputs:File with mapping, SOAP credentials. User device group must exist. Workflow can be executed automatically by Alarm (new device added). Workflow can be executed manually or scheduled. 8.2.5.50v4
Assign Device to User Device Group based on site Automatically assigns device to the user device group based on site. Define SOAP credentials. User device group must exist (Use workflow "Create Device Groups from Sites" to create the user group structure.). Workflow can be executed manually or scheduled or part of the site actions. Multiple devices can be processed by one run. 8.4.0.115v3
Synchronize Vlans on Catalyst This workflow creates VLANs on the Cisco Catalyst switch based on Site and Services vlan configuration. The workflow deletes VLANs from Cisco Catalyst if the VLAN does not exist in the Site nor in the Services definition. The workflow renames VLAN name to match the Site or Services. If a change has been made, the event is generated. 8.4.1.23v15
Synchronize Vlans on ERS This workflow creates VLANs on the ERS switch based on combination of Site and Services vlan configuration. The workflow deletes VLANs from ERS if the VLAN does not exist in the Site nor in the Services definition. The workflow renames VLAN name to match the Site or Services. If a change has been made, the event is generated. 8.4.1.23v20
Synchronize Vlans on ISW This workflow creates VLANs on the ISW switch based on combination of Site and Services vlan configuration. The workflow deletes VLANs from ISW if the VLAN does not exist in the Site nor in the Services definition. The workflow renames VLAN name to match the Site or Services. If a change has been made, the event is generated. 8.4.0.116v5
Disable unused ports If the port is unused for more than X days then the port is set to Admin-Down state and ifAlias is configured. On EXOS and BOSS and FastPath and ISW devices there is option to save the configuration. Variable PortDescription defines the ifAlias prefix. Custom Inputs: Topology roles delimited by comma (XMC version 8.3 the roles are numbers starting from 0, XMC version 8.4 roles are "L2 Leaf,L2 Access,...", how many days should be the port down before workflow takes the action, if you do want to save the changed configuration. What sites and subsites you want this workflow to execute. You can schedule the workflow execution in task scheduler. 8.4.1.23v61
Refresh Neighbor Devices This workflow checks neighbor devices based on XMC link database and executes refresh of each neighbor. If the device goes down or up then the map is automatically updated. Create Status Change Alarm and for both contact lost and contact established add action run task with this workflow. 8.2.4.55v2

Extreme Management Center NAC-related Workflows

Workflow name Description Comment Version
Delete end-system from ExtremeControl This workflow deletes End-System with specified MAC from the database. Can help with implementation of GDPR "Right to be forgoten". Various MAC address formats are accepted: lowercase, uppercase, dot delimited, colon delimited, dash delimited, not delimited 8.2.4.41v6
Delete from ExtremeControl This workflow deletes End-System with specified MAC or Username from the database. Can help with implementation of GDPR "Right to be forgoten". Various MAC address formats are accepted: lowercase, uppercase, dot delimited, colon delimited, dash delimited, not delimited. Domain is not mandatory in the username. 8.2.4.41v4
Investigate End-System History Workflow generates email with details from end-system history based on defined criteria. Input:MAC or Username, Date range. Define email recepients before use. 8.2.5.50v48
Remove all End-Systems from group This workflow removes all end-systems from end-system group. It can be scheduled to execute periodically. Define end-system group in variable "EndSystemGroup" default end-system group: "Access Expired". 8.3.1.9v12
Investigate End-System history Prompt for MAC or Username and for time range. Workflow creates table of end-system events in the database and send it by email. Configure the email recipients before executing. Variable InstallDirectory is referring to the XMC installation path. 8.2.5.50v48
Import credentials from MySQL to local repository Workflow connects to external MySQL server and read usernames and passwords. These are then injected to the local password repository. Can be executed once, can be scheduled. Input:SQL server, SQL username, SQL password, SQL database, SQL table, Column with username, Column with password. 8.4.0.115v13
RFC3580 for ISW through CLI This workflow delivers missing RFC3580 feature on the ISW for Macauth. If it is mac authentication then it configures on the switch vlan based on authorization VLAN in the radius response. The configuration is done through ssh/telnet. When the end-system is disconnected it returns the port vlan to default. Define disconnected PVID. Create 2 notification rules. State Change and New End-System Added. 8.4.2.38v11
RFC3580 for ISW through SNMP This workflow delivers missing RFC3580 feature on the ISW for Macauth. If it is mac authentication then it configures on the switch vlan based on authorization VLAN in the radius response. The configuration is done through SNMP. When the end-system is disconnected it returns the port vlan to default. Define disconnected PVID. Create 2 notification rules. State Change and New End-System Added. 8.4.2.38v2
Limit number of End-Systems with the same Username The workflow reads all end-systems and process only those in Accept state. If the number of end-systems with the same name is higher than threshold then one of following will happen: UserName can be added to defined User Group and all end-systems are reauthenticated. All MACs for that username are added to defined ES group and all those end-systems are reauthenticated. Only older MACs for that username are added to defined ES group and are reauthenticated. Define number of allowed end-systems with the same username, action what will happen, group to add MACs/Username. Schedule the workflow execution. 8.4.2.38v2

Extreme Management Center Workflow Combinations

Name Workflows Description How To Version
User authenticated on domain computer Add MAC to Domain Computers, Clear old End-Systems in the group "Add MAC to Domain Computers" is executed when computer authenticates. The MAC address is added to End-System and timestamp is created (updated). Consequent User authentication can be combined with condition of End-System group. "Clear old End-Systems in the group" checks if the timestamp is older than X hours and old End-Systems are deleted from the group. Create End-System group "Domain Computers". Create User Group Username starts with host/. Create notification Domain authentication - after logoff. Create notification Domain authentication - after boot. Configure inputs for workflows. Schedule the workflow execution to clean old end-systems from End-Systems group. Create NAC rule 8.3.1.9v3 8.3.1.9v5
Add NSI to Vlan Egress = After Policy Enforcement Run Add NSI After Policy Enforcement, Add NSI prefix to vlan egress There maybe tagged egress vlans in the policy profiles. This workflow ensures these egress vlans are mapped to proper NSI on EXOS switch. This check is executed on each reachable device in the policy domain, when the enforce is completed. Import both workflows. The "Run Add NSI After Policy Enforcement" should be executable by Alarm. Configure the path to the "Add NSI prefix to vlan egress" workflow. Create Alarm to execute the workflow if the policy domain is enforced. Create topology if you do not have any. Create Service and Application. Assign Topology to the Site. Assign Service Definition to the Site. 8.4.0.107v11 8.3.1.9v35
IGE Governance Regime Governance Regime Export, Governance Regime Import Governance Regime can be exported and then imported to other XMC instance. You can share your regime with the community. Professionals can share regimes with their customers. You may need modify the InstallDirectory variable. During the Export you need to specify name of the regime. The regime is exported to the file system InstallDirectory/GovernanceEngine/audit-tests/ as tgz file. The export workflow can email the regime. Transfer the file to the new system. During the import select if imported tests will be marked read only or editable. 8.4.1.23v7 8.4.1.23v4

Extreme Management Center Extreme Fabric Automation Workflows

Workflow Name Description How To Version
Day 0 Create Fabric Creates Fabric through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress to reflect your environment. 8.4.2.38v12
Day 1 Create Tenant Creates Tenant through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress to reflect your environment. 8.4.2.38v10
Day 1 Create EPG Creates VRF, Port Channels, EndPointGroup through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress, PortChannelSpeed, PortChannelNegotiation, PoName to reflect your environment. 8.4.2.38v7
Day 2 Add Ports to Tenant Adds ports to existing Tenant through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress to reflect your environment. 8.4.2.38v8
Day 2 Add Ports to EPG Adds ports to existing EndPointGroup through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress, PortChannelSpeed, PortChannelNegotiation to reflect your environment. 8.4.2.38v11
Day 2 Create PortChannel Creates PortChannel through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress, PortChannelSpeed, PortChannelNegotiation to reflect your environment. 8.4.2.38v10
Day 2 Create VRF Creates VRF through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress to reflect your environment. 8.4.2.38v3
Day 2 Delete Fabric Workflow deletes existing Fabrics through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress to reflect your environment. 8.4.2.38v2
Day 2 Delete Tenant Workflow deletes existing Tenants through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress to reflect your environment. 8.4.2.38v2
Day 2 Delete PortChannel Workflow deletes existing Port Channels through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress to reflect your environment. 8.4.2.38v2
Day 2 Delete VRF Workflow deletes existing VRFs through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress to reflect your environment. 8.4.2.38v2
Day 2 Delete EPG Workflow deletes existing EPGs through Extreme Fabric Automation. EFA must be in the XMC with valid CLI credentials. Modify variable EFAaddress to reflect your environment. 8.4.2.38v3

Support

The software is provided as-is and Extreme Networks has no obligation to provide maintenance, support, updates, enhancements, or modifications. Any support provided by Extreme Networks is at its sole discretion.

Issues and/or bug fixes may be reported on The Hub.

Be Extreme