View real-time network statistics using status cards. View, search for, add, filter, sort, select, modify, and delete device objects; view device status; customize device configurations; view switches; and assign devices to existing locations.

About the Devices List

From the devices list, you can view, add, and update managed and unmanaged devices, check connections to a RADIUS server and perform other management actions. Select the hostname of a device to see an overview with information about that device.

  • ExtremeCloud IQ shows all available network statistics. ExtremeCloud IQ Connect shows a reduced set of network statistics.

The Filter Sidebar

Select in the left sidebar to filter information that appears in the devices list.

The icon changes depending on whether a filter is applied. When there are no filters applied, the icon appears as shown: . When one or more filters are applied, the icon appears with a colored dot .

You can configure the following filters:

  • Devices: Filter data for devices based on location, network policy, device type, connection state, audit status, management state, function, product type, software version, and cloud config group. If required, select More to see all available items, or select Less to see items.
    Select to see a summary view for a selected network policy.
  • Network: Filter data to show selected network SSIDs.
  • Users: Filter the data by user profiles.

To save your filter, select Save. In the dialog box, enter a filter name and then select Save again.

Network Status Indicators

Status indicators at the top of the devices window give you an at-a-glance view of your network conditions. The indicators that are displayed differ depending on the version of ExtremeCloud IQ you are using.

Status data automatically updates when you first display the Devices window. Hover over or select a non-zero value in an indicator to see more information. Select to refresh the status indicator and device data in this window. Select any number to see more information.

The status indicators display the following information:

  • Connection Status: The number of devices currently connected and active, or inactive.
  • Total Apps: The number of unique network applications that have been active on your network, the application that used the most bandwidth, and the user who consumed the most bandwidth.
  • Clients: The number of authenticated and connected clients, such as smartphones, PCs, and tablets.
  • Users: The number of authenticated users.
  • Alarms: The number of alarms. Alarms are displayed for the past 24 hours and categorized as minor (yellow), major (orange), and critical (red).
  • Security: The number of rogue APs and rogue clients detected in your network over the past hour.

Devices List

View and configure your ExtremeCloud IQ Connect or ExtremeCloud IQ managed devices from any of the four main views described in "Device List Views". The view selector is to the right of the icon.

Use the column picker to customize the columns that are displayed in the devices list. Scroll the list horizontally if the columns do not all fit the width of your window. Select and drag the right edge of any column to change the column width. Select column headings to sort the data. Your customized display is maintained even when you go to another window, log out and then log in again.

  • Switch Stack Display: Switch stacks appear in the devices list by the hostname of the primary switch. Select next to the switch hostname to see stack details. The display expands to show each member of the stack.

Device List Views

The device list window has multiple view options. Select Default View above the table to see a drop-down list of the other available views as described below. For all views, you can arrange table columns and customize the table contents using the column picker, although the available columns vary depending on the view. The following views are available:

Default View: Displays information about all of the devices on your network, including controllers and their controller-managed devices.

Wireless View: Displays information about only the wireless devices on your network.

LAN View: Displays data for LAN devices in a specific location. The LAN view table columns can be arranged independently of the other views using the LAN column picker.

WAN View: Displays data for only WAN routers and VGVAs set to L3 mode. The WAN view table columns can be arranged independently of the other views using the WAN column picker.

Locally Managed View: Displays devices that are managed locally, such as those managed by IQ Virtual Appliance or by a controller.

Controller View: Displays all onboarded controllers.

Regardless of which view you select, the following rules apply to the table displays:

  • The default and wireless views share the same column identifier and column arrangement. The WAN and LAN views use unique column pickers.

  • Column identifiers and positions can be customized.

  • Your customized view is persistent. If you leave a view and return later, these settings remain as you configured them.

Device Status Icons

The following table contains the device status icons used in ExtremeCloud IQ along with a description of each:

Icon Short Description Full Description
Provisioned Device

An administrator has provisioned the device, but the device has not yet communicated with ExtremeCloud IQ.

This is an administrative state and does not reflect the actual connection status. To view the actual connection status, you must manually change the management state using the Actions > Change Manage Status > Managed Devices menu option.

Connected Device Device is actively communicating with ExtremeCloud IQ.
Disconnected Device

Device is not actively communicating with ExtremeCloud IQ.

Cause: The device might be physically disconnected from the network or powered off. This condition also occurs if there are interruptions in the network between the device and ExtremeCloud IQ or when there are misconfigured firewalls or ACL rules.

Action: Ensure the device is connected to the network and powered on, and ensure that communication can occur through logical barriers such as firewalls.

Simulated Device Device is a simulated device, which possesses only simulated configurations, conditions, and traffic. By contrast, a real device has a physical presence on the network and consumes power and network resources.
Unknown State

Device is in an unknown state.

Cause: This condition can arise when the indicators are ambiguous, indeterminate, or appear contradictory due to other factors.

Action: Begin general troubleshooting procedures to ensure that the device is powered, connected, and is responding to traffic and CLI commands. Ensure that the device is communicating appropriately with network services, such as NTP, DHCP, etc.

Old OS Personality (Inactive) Device formerly used another OS persona, which is no longer active. The information in this record pertains to the device when it ran using this OS persona.
Configuration Audit Match The network policy configuration matches the current running configuration.
Configuration Audit Mismatch

The network policy configuration does not match the current running configuration.

Cause: The Configuration Audit Mismatch icon is visible on devices between the time that network policy changes are saved and the time that the altered network policy is uploaded to the device.

Action: Upload the network policy to the device.

Configured at Device Level Device possesses a device-level configuration that is different from the configuration defined in the network policy. This is not an error condition, but this information can be useful when troubleshooting network behavior because device-level configurations supersede device templates and network policy configurations.
Device Update Unsuccessful

Device did not accept the OS or configuration upload.

Cause: There are many reason for an unsuccessful update, but the most common include network connectivity or connection status changes, or the device rejected the command it received.

Action: Hover over the update message in the Updated column to view the reason message describing the likely error condition. Ensure that the device is properly powered, that there is appropriate network connectivity, and that common causes listed here are not the issue.

Managed by ExtremeIOT Device is provisioned to function with ExtremeIOT.
Monitoring Unassociated Clients Device is using presence analytics to monitor client devices that are not associated to the network, such as passers by.
Switch Stack (Closed) Device is a switch stack, but the stack is collapsed visually and appears as a single device.
Switch Stack (Open) Device is a switch stack, and the stack is expanded visually to reveal stack members.
Switch Stack Warning

One or more stack member switches is not associated to the master stack node.

Cause: One or more member switches within a stack has lost connectivity to the master stack node. This can happen if the member switch is powered off, physically disconnected from the stack, or if there is an issue with the switch itself.

Action: Ensure that the switch slot has power and that the stacking cables are properly connected.

RadSec Proxy Server Device is acting as a RadSec proxy server. This service optimizes some authentication functions, especially for cloud authentication, such as cloud PPSK and cloud RADIUS.

Rogue AP Mitigation On

Device is actively mitigating a rogue access point. Refer to the information provided by your security management platform.
Sensor Mode - Interface Active Device is functioning as a sensor and the monitoring interface is active and monitoring the RF environment.
Sensor Mode - Interface Inactive Device is functioning as a sensor, but the monitoring interface is not active and is not monitoring the RF environment.
Swap for Real Device Device is a simulated device that you can exchange for a real device.
Spectrum Intelligence Device is functioning as a Spectrum Intelligence monitor, which monitors the RF environment and provides frequency and time domain graphs and heat maps.
VPN Server - Tunnel Up Device is functioning as a VPN server and the VPN tunnel is up, healthy, and operating properly.
VPN Server - Tunnel Down

Device is functioning as a VPN server, but the VPN tunnel is down. If the tunnel is administratively down, then this is not an error condition.

Cause: If not administratively down, issues on the client side can cause the tunnel to go down. Additionally, if the client- and server-side configuration do not agree, then a tunnel cannot be built.

Action: Consult the VPN troubleshooting tools in ExtremeCloud IQ. You can also ensure that the client device is connected to the network and that the tunnel configurations agree on both ends of the tunnel.

VPN Server - Tunnels Up and Down

Some of the VPN server tunnels are administratively up but operationally down.

Cause: VPN client might be down, or unreachable.

Action: Ensure that the VPN clients are powered on, connected to the network, and communicating with ExtremeCloud IQ. In addition, ensure that there is connectivity and communication between the VPN server and clients.

VPN Client - Tunnels Up Device is functioning as a VPN client and the VPN tunnel is up, healthy, and operating properly.
VPN Client - Tunnels Down

Device is functioning as a VPN client, but the VPN tunnel is down. If the tunnel is administratively down, then this is not an error condition.

Cause: If not administratively down, issues on the server side can cause the tunnel to go down. Additionally, if the client- and server-side configuration do not agree, then a tunnel cannot be built.

Action: Consult the VPN troubleshooting tools in ExtremeCloud IQ. You can also ensure that the server device is connected to the network and that the tunnel configurations agree on both ends of the tunnel.

VPN Client - Tunnels Up and Down

Some of the VPN client tunnels are administratively up but operationally down.

Cause: VPN server might be down, or unreachable.

Action: Ensure that the VPN server is powered on, connected to the network, and communicating with ExtremeCloud IQ. In addition, ensure that there is connectivity and communication between the VPN server and client.

Locally Managed (ExtremeCloud IQ) Device is managed by a platform that is visible in ExtremeCloud IQ.
Locally Managed (No ExtremeCloud IQ)

Device or its management platform are not visible in ExtremeCloud IQ.

Cause: This is not always an error condition, but it can indicate a status communication problem. In this case, the device is functioning properly, so there is no disruption in network performance; instead, the status communication is disrupted so that ExtremeCloud IQ is unaware of the status.

Action: First, ensure that the device is functioning properly to rule out problems with the device. Next, ensure that there are no logical barriers between the device and ExtremeCloud IQ. Afterward, ensure that any applications that lie in the communication path are receiving, processing, and sending data appropriately.

Extreme Cloud Appliance Cluster (Closed) Device is a logical cluster of appliances, but the cluster is collapsed visually to appear as a single device.
Extreme Cloud Appliance Cluster (Open) Device is a logical cluster of appliances, but the cluster is expanded visually to reveal the cluster members.
Fabric Attach Device is a member of the Fabric Attach Connect Automation environment and is functioning properly in that context.
Fabric Attach Issue

Device is Fabric Attach capable, but the Fabric Attach (FA) session to the FA server is not established.

Cause: This can occur if the communication link between the FA device and server is disrupted or if FA is disabled on the peer switch.

Action: Ensure that there is connectivity between FA device and server, and that FA server functionality is enabled on the peer swtich.

Default View

By default, the Devices list contains the following columns. Many of these columns are sortable. You can customize the list using the column picker (). See "Optional Devices List Columns" .


HOST NAME: The host name of the device. Select the host name to see more information about this device.

CONNECTION STATUS: The connection status of the device, indicated by the icon colors. Hover over an icon to see the name of the icon and what it identifies.

  • For switches, indicates that the switch uses device-level configuration settings instead of the device template (network policy) configuration. Select this icon to revert to the device template configuration.

POLICY: The network policy assigned to this device. If you have not assigned a network policy, you can do so now. Select the check box next to the device, and then select ACTIONS > Assign Network Policy.

UPTIME: The amount of time since the device last rebooted and re-connected.

MGT IP ADDRESS: The IPv4 address of the device.

CLIENTS: The number of clients connected to this device.

MAC: The MAC address of the device.

LOCATION: The location of the device in your network. To assign or change the device location, select the device, select the Actions/Assign Location link, or select the link in the location column you want to edit. In the dialog box, highlight the device and move it to the correct location and select Assign.

SERIAL #: The serial number of the device.

MODEL: The hardware model of the device. The hardware model and serial number appear on a label on the underside of the chassis.

OS VERSION: The ExtremeCloud IQ version that is currently running on the device.

MANAGED BY: The management system or controller version(for devices managed by controllers).

IQ AGENT: For switches, the IQ Agent version. IQ Agent allows communication between switches and ExtremeCloud IQ.

STACK STATUS: For switch stacks, the switch role in the stack (primary, member, or standby).

UPDATED: The date of the last device update.

  • If an update was not successful, ExtremeCloud IQ displays a " Device Update Failed" error message. Error messages include configuration, firmware, certificate, and signature update issues, reboot timeouts, and error information specific to devices configured using Automatic Provisioning. Hover over the error message to see details. To view error message descriptions listed by device and timestamp, select the error message link.

WIFI0 POWER: The power level of the WiFi0 radio.

WIFI0 CHANNEL: The channel currently used by the WiFi0 radio. Refer to the data sheet for your device and your SDR (software-defined radio) configuration to determine the band on which the WiFi0 radio is operating.

WIFI1 POWER: The power level of the WiFi1 radio.

MGT VLAN: The management VLAN for this device.

Optional Devices List Columns

Use the column picker to customize the Device list to display additional optional columns. Select Clear Filter to clear custom column settings.

Add Devices

ExtremeCloud IQ offers two ways to onboard devices. Select + and choose either method from the drop-down list.

  • Quick Add Devices is a simplified onboarding procedure to add real or simulated devices to your network. This process requires you to choose an existing location.
  • Advanced Onboarding is a guided onboarding procedure to add real or simulated devices, assign locations, and either assign an existing network policy or create and assign a new network policy.

Adding Devices of Different Device Families

ExtremeCloud IQ supports many families of devices and each family is sufficiently distinct from another to make onboarding them together a complicated matter. Multiple devices of the same family can always be onboarded together.

The following table clarifies which device families must be added alone and which can be added with devices from other families:

First Device Family Additional Device Family Comments
AP (any family) AP (any family) Allowed
AP (any family) Switch (any family) Not Allowed
AP (any family) Router (any family) Not Allowed
FASTPATH Switch IQ Engine Switch Allowed
Router (any family) Router (any family) Allowed
ExtremeXOS Switch Any other device family Not Allowed
VOSS Switch Any other device family Not Allowed
Universal Hardware Switch Any other device family Not Allowed
WiNG Controller Any other device family Not Allowed
XCC Controller Any other device family Not Allowed
XMC Any other device family Not Allowed
Universal Appliance Any other device family Not Allowed

Add Real Devices with Quick Onboarding

Select + > Quick Add Devices and perform the following steps:

  1. For Device Type, select Real.
  2. For Entry Type, select Manual and enter Extreme Networks device serial numbers or Dell service tags in the field to the right, or select CSV and import a .CSV file with a list of device serial numbers or service tags. If you select Manual, the ExtremeCloud IQ attempts to detect your device automatically when you submit the serial numbers and displays the detected device make in a separate field. If ExtremeCloud IQ cannot detect the device make from the serial number, then it prompts the admin to select a device make manually.
  3. Select your location from the pick list. You cannot create a new location in the Quick Add process; you must select an existing location.
  4. To assign an existing network policy to the devices, choose one from the Add Policy drop-down list (optional).
  5. Select Add Devices.
  • To add a device that was previously onboarded using an earlier version of ExtremeCloud IQ or Extreme Management Center, you must first delete the device from the older version. In these instances, you will see an alert.

Add Real Devices with Advanced Onboarding

To add Extreme Networks or Dell EMC devices, select + > Advanced Onboarding and follow these steps:

  1. For Device Type, select Real.

  2. Enter the serial numbers or device service tags (Dell devices only) manually in the first field, separated by commas, or:

  3. Import a CSV (comma-separated-values) file by either dragging a file into the second field, or browse for a file by selecting Choose. For more information, see "CSV File Format"

  4. Assign a network policy (optional). Select an existing network policy from the drop-down list or create a new network policy. For detailed instructions about how to configure network policies, see "Network Policy Settings".

  5. Select Next, and then select Finish.

CSV File Format

Your .csv file must have at least one field that contains the serial numbers or service tags. Add a second field for the model numbers of the devices. For example:

Serial Number or Service Tag Only:




Serial Number or Service Tag, and Model Number:

01221234567894, AP350

01221234567895, AP410

01221234567896, AP630

  • If possible, avoid using spread sheet applications such as Excel to create or modify a .csv file. Excel formats serial numbers that contain preceding zeros incorrectly. Many applications interpret the serial number as a numeric value, which can cause the preceding zeros to be lost and the value to be represented in scientific notation, requiring you to use special functions or convert the cell content type. Instead, use a text editor that does not format the contents.

Add Simulated Devices with Quick Onboarding

To add simulated devices, select + > Quick Add Devices, and perform the following steps:

  1. For Device Type, select Simulated.
  2. In the device model drop-down list, choose a model, and enter the number of devices to add. Repeat this step to add different models.
  3. Assign an network policy from the Add Policy drop-down list to the simulated devices. (Optional).
  4. Select Add Devices.

Add Simulated Devices using Advanced Onboarding

To add a simulated device, select + > Advanced Onboarding and follow these steps:

  1. For Device type, select Simulated.
  2. Select a device model from the drop-down list, and select Add Device Model. Repeat this step to add more devices.
  3. Select Next. The process takes you through several optional steps that include assigning a location and a branch ID, creating a network policy, and configuring an internal and guest SSID.
  4. Select Finish.

Device List Features

Several features help you understand how your devices are functioning. These features are described below:

Download device data: Select the download icon to download device data in .csv format.

Search for devices: Enter all or part of a device name, MAC address, or serial number in the search field above the devices list to see a display of all matches.

Edit devices: To edit the settings for a device, select the check box or hostname for a device, select and make the your changes.

To select multiple devices simultaneously, select the check boxes for all of the devices you want to edit, select , and make the required changes to the shared parameters. Remember to save your edits.

Delete Devices: Select the check box for each devicethat you want to delete, select , and confirm the deletion.

Selecting devices: Select devices by selecting their hostname or check box. The number of devices you select appears in the Showing <devices selected> of <total filtered devices> Selected display. There are multiple ways to select devices:

  • Select each device check box individually.
  • To select all of the devices in the current window by selecting the header row check box at the top of the list (bulk select). Then clear the check boxes for devices for which you do not want to perform an action.
  • When you have multiple windows of devices, to select all of devices in all windows, choose All Pages. To clear all device check boxes, select None. Once you select All Pages, you cannot clear individual device check boxes.

View Configuration Audit Matches and Mismatches: Select or for more details. In the Configuration View dialog box, you can see the following information in the Audit, Delta, and Complete tabs:

The Audit tab lists any modifications made in ExtremeCloud IQ since the previous configuration update to the device. For example, if you modified an existing user profile or added a new user profile, your changes appear on the Audit tab.

The Delta tab shows the CLI commands that have changed since the previous update.

The Complete tab shows all CLI commands (including the CLI commands in the Delta tab) that form a configuration file. ExtremeCloud IQ uses this file for the next configuration update. After a successful configuration update, the configuration in the Complete tab matches the running configuration.


The Utilities button provides device monitoring and troubleshooting tools. Select the check box for a device, select UTILITIES, and then select an option from the drop-down list. Because not all options are available for all devices, the drop-down list contents will vary depending on the type of device you select. See the descriptions of the tools and options in the following sections.

  • Not all utilities are available for all device types.

Diagnostics: (Applies to switches only.) To perform basic network connectivity diagnostics, use the ping tool, and view the CLI output show commands to check several functions' status and diagnose problems.

  • ExtremeCloud IQ Connect does not support access to CLI commands. To perform diagnostics on APs via CLI commands , upgrade your service to ExtremeCloud IQ Pilot

Select the check box for a switch, select UTILITIES  and then choose one of the following from the drop-down list:

Ping: By default, have the selected device ping the IP address of its mgt0 interface. You can change the target and ping any IP address such as its default gateway or another address beyond the gateway, such as a DNS server.

Show Log: View the event log on the selected device.

Show MAC Table: View the MAC table of the selected device.

Show Version: Check the version of IQ Engine running on the selected device.

Show Running Config: View the configuration running on the selected device (displayed as a series of CLI commands).

Show Startup Config: View the selected device configuration on reboot (displayed as a series of CLI commands).

Show IP Routes: View the IP routing table on the selected device.

Extreme Networks devices use GRE tunnels for three features:

Show CPU: View total, per user, and per system CPU utilization for the selected device.

Show Memory: See the total amount of memory, and the amounts of free, used, buffered, and cached memory for the selected device.

Show PSE: View the power management settings for PSE (power source equipment) for the selected device.

Get Tech Data: (Applies to switches only.) This element displays the output from the show tech-support response. Select the check box for a switch for which you want to retrieve technical information and select Get Tech Data. Once ExtremeCloud IQ retrieves the data, you can save the .tar.gz file to a local directory. To view the logs in a text editor, you must first expand the .tar.gz file with a file compression and decompression program.

Restart PSE: (Applies to switches only.) You can restart the PSE (power sourcing equipment) function on Extreme Networks PoE (Power over Ethernet) switches. A warning statement appears after you select Restart PSE. When you select Yes, the switch briefly stops supplying PoE on all PoE-enabled ports, and then re-applies PoE. All devices receiving PoE from the switch are power cycled.

Reset Device to Default: You can reset one or more selected devices to their default configuration. A warning statement appears after you select Reset Devices to Default. When you select Yes, the operation removes all existing settings (except bootstrap settings) and reboots the selected devices.

Manage Device License: Two sub-functions are available to activate or revoke a device license. This operation includes both Premier and MACsec class licenses.

Privilege Mode: (Applies to switches only.) From the privileged EXEC mode, you can switch to the Global Configuration and VLAN modes. You can enable password-protected access to the privileged EXEC mode and set a password.

Spectrum Intelligence: (Applies to APs only). Spectrum intelligence provides a live view of the RF (radio frequency) environment to help you plan for future WLAN deployment or troubleshoot WLAN issues such as high retransmission rates caused by device interference or slow connections due to overuse. There are two main spectrum intelligence functions: providing a graphical rendering of the RF environment in an FFT (fast Fourier transform) trace and swept spectrogram and identifying interfering devices such as cordless phones and microwave ovens. The number of devices that can perform a spectral scan concurrently varies depending on which ExtremeCloud IQ platform you use. IQ Virtual Appliance limits the number of concurrent scans to two (that is, only two APs can perform spectrum analysis functions simultaneously). The physical appliance allows for ten concurrent scans, while ExtremeCloud IQ permits up to 20 concurrent scans.

  • To use the spectrum intelligence feature, you must have at least one SSID configured on your WLAN on at least one AP running ExtremeCloud IQ 11.28 and IQ Engine 8.0 or later.

To start spectrum intelligence scanning, perform these steps:

  1. Select the check box for up to five supported APs, then select UTILITIES.
  2. From the UTILITIES drop-down list, select Spectrum Intelligence. A message warns you that performing this function can affect performance. To continue, select Yes to see the analysis panel, containing a status bar, a graphical analysis feedback section and the interference report. For more details, see "Spectrum Intelligence".

While an AP is performing spectrum Intelligence analysis, appears next to the device name in the devices list. Select this icon to see details. When you stop the scan, this icon disappears.

  • During the brief intervals of sampling, no data transfer occurs. However, if the AP is very busy processing wireless traffic (that is, it has a high duty cycle), sampling and analysis can subtly impact the performance. Any analysis that monitors multiple channels must accommodate the added time needed for the scanning interface to switch channels.

Status: (Applies to APs only.) The Status utility displays the following:

Advanced Channel Selection: This shows the interface name, whether the channel is enabled or disabled, the specific channel, the power control state, and the transmit power level in dBm.

Interface: Shows a table listing interface details including the device name, MAC address, state, channel, authorized VLAN, hive ID, and the SSID. To see details for a specific interface, select the interface in the drop-down list at the top of the dialog box.

Wi-Fi Status Summary: Displays channel number, power, authentication mode, associated time, user profile ID, SSID name, and other information gathered from a device that has a currently active connection to ExtremeCloud IQ Connect or ExtremeCloud IQ. This operation is not supported for simulated devices or devices that require a complete configuration update.


Actions allow you to reboot, assign a country code, update a bootstrap configuration, and issue CLI commands to devices through ExtremeCloud IQ. Select the check boxes for the devices you want to act and then select ACTIONS.

  • Not all actions are available for all device types.


Assign Network Policy: Assign an existing network policy to the device or devices.

Assign Location: Assign a location from your network maps to the device.

Assign to Organization: (Hierarchical ExtremeCloud IQ only.) Assign the selected devices to an existing Hierarchical ExtremeCloud IQ organization. See "Hierarchical ExtremeCloud IQ Organizations" for more information.

Manage Device License: Use this option to activate a Premiere or MACsec license. See "License Information" for more information.Reboot: Reboot the device.

Assign Country Code: Assign the correct country code for the location where this device is deployed.

Add to Cloud Config Group: Add this device to a Cloud Config Group

Revert Device to Template Defaults: Select to return the device settings to the network policy template. This removes any device-level configuration settings.

Assign Branch ID: Add a branch ID or select a branch ID from the drop-down list and select Save. When onboarding multiple routers to support VRRP, the associated remote routers must have the same Branch ID.

Reboot: Reboot devices after uploading a configuration. Rebooting momentarily disconnects any associated clients from the SSID, which could be disruptive.

Assign Country Code: Select a country code for a managed device from the drop-down list. The country code determines which radio channels and power limitations devices will support to comply with the wireless regulations for the country in which they will operate. For devices intended for use in the United States, the region code is preset as "FCC" and the country code is preset as "United States". Select Save, to reboot the selected devices.

Add to Cloud Config Group: Add the selected devices to a Cloud Config Group (CCG). In the Add to Cloud Config Group panel, select a CCG to assign to the selected devices, and then select Continue. See "Cloud Config Groups".

Reset IDM Client Certificate: Reset the certificate used by the IDM clients.

Advanced: This option offers three functions: CLI Access, Bootstrap Configuration, and Update Netdump Settings. Select the check boxes for the devices you want to update, and select one of these options from the Advanced menu:

CLI Access: (Real devices only) Use this feature to enter CLI commands for the selected device or devices without establishing a console cable connected to the device. Enter the command in the field, and then select Apply. The results of the command are displayed below the command entry field.

See the command results displayed below the command entry field.

Bootstrap Configuration: Use this simple configuration to re-establish a connection between a device and ExtremeCloud IQ Connect or ExtremeCloud IQ. The information you enter here allows you to log in to a device when running the bootstrap configuration. When there is a bootstrap configuration on an AP, the AP fails over to it when you reset the configuration or if the current and backup config files fail to load. When there is no bootstrap config file on an AP, it fails over to default configuration settings. In the Update Bootstrap dialog box, enter the following:

Bootstrap Admin and Password: Enter the credentials for an admin to access the device after it has loaded a bootstrap configuration.

Admin Name: Enter the root admin name (this is required while running the bootstrap configuration for this device).

Password: Enter the password for this device when running the bootstrap configuration.

Configure the Bootstrap CAPWAP settings

Extreme Networks devices use the CAPWAP protocol to communicate with each other (CAPWAP clients) and ExtremeCloud IQ Connect or ExtremeCloud IQ (CAPWAP server). The client sends Discovery Request messages until it receives a Discovery Response from the server. When this happens, the CAPWAP server and client establish a secure DTLS session and mutually authenticate each other using a preshared key derived from a passphrase.

Primary CAPWAP Server: Enter the IP address or domain name that the device uses to communicate with ExtremeCloud IQ through CAPWAP when it is behind a NAT device. This is a ExtremeCloud IQglobal setting that includes in the configurations it pushes to all devices and can be found in the Device Credentials window.

Backup CAPWAP Server: Enter the name of a backup CAPWAP server for this device found on the Device Credentials window.

VIQ Name: Enter the name of the VIQ account which manages this device.

CAPWAP UDP Port: Enter the UDP port for CAPWAP communications. To avoid reconfiguring the firewall, you can configure devices behind the firewall to communicate with ExtremeCloud IQ Connect or ExtremeCloud IQ using HTTP on TCP port 80 instead of CAPWAP UDP port 12222. The default is 12222. The port range is 1024 - 65535.

When you have configured the CAPWAP settings, select UPDATE.

Update Netdump Settings:You can configure a device to automatically save a core netdump file to a TFTP server on the network when it next boots up after becoming unresponsive. You can then provide this file to Extreme Networks Support to help diagnose the issue.

Select the check box for devices on which you want to enable the netdump option. Select the check box to Enable Netdump and then update the settings in the fields that appear.

Enable Netdump: Select the check box and complete the following fields:

TFTP server for saving Netdump files: Enter the TFTP server IP address to which you want the devices to send the core dump file.

Netdump filename to save: Enter a Netdump filename.

VLAN for reaching the TFTP server: Enter the VLAN of the interface from which the device sends the Netdump file to the TFTP server.

Native VLAN of the local Extreme Networks device: Enter the native VLAN of the device.

DHCP: Select to have the device bootloader use DHCP to obtain an address on startup.

Static: Select to have the device bootloader use a static IP address. Enter the required static IP settings that the bootloader must use to connect to the network.

This feature becomes active after a you perform a full configuration update for the selected devices.

Change Management Status: Choose managed or unmanaged.

Clear Audit Mismatch: There may occasionally be a mismatch between the ExtremeCloud IQ configuration database and the device configuration database. If this occurs, perform this action.

Update Devices

When updating devices, You can perform a full or delta configuration update, or update to the latest version of IQ Engine (APs only). You can also choose when devices reboot after an update is complete so that rebooting occurs during a period when the brief interval during which connectivity is lost causes the least disruption to network users.

  • When updated, ExtremeCloud IQ Connect or ExtremeCloud IQ Pilot displays the progress of the update in the Updated On column of the Device list.

Select the check box for the device or devices you want to update, and then select UPDATE DEVICES. Make the following selections and then select Perform Update. To save your update preferences as the default setting, select Save as Defaults.

Update Network Policy and Configuration: Select to update the network policy, configuration, and application signatures on your devices, and then choose either a Complete Configuration Update (a complete configuration update and reboot), or Delta Configuration Update(an update of the changes since the last configuration update. Devices do not automatically reboot after a delta configuration update.)

Upgrade IQ Engine: Use this option to upgrade the IQ Engine image on selected devices. Choose from the following options:

Upgrade to the latest version: Select this option to upgrade the selected devices to the latest IQ Engine version on multiple device models.

  • The following option is only available when you select a single device or when you select multiple devices that are all the same device model.

Upgrade to the specific IQ Engine version: This option allows you to upgrade the IQ Engine version on a single device or for multiple devices. Choose an image file from a drop-down menu of IQ Engine releases for the selected device (or devices)and multiple devices of the same model. Use this option to downgrade a device (or multiple devices) by selecting an older version of IQ Engine than what is currently running on the device. To add a local IQ Engine image from your PC to the drop-down list, select Add/Remove, and then Choose in the dialog box. Image file names can contain up to 64 characters without spaces, and must have an extension of ".img" or ".img.S". Use Add/Remove to remove an image file that you uploaded locally, select the image file, and then select .

Upgrade even if the versions are the same: Select this option to update a device to a patch release, or if you have several IQ Engine versions running on the same device model, such as the SR2124P, and you want to upgrade all of them to the same IQ Engine version.

Activation Time After Complete Configuration Uploads or IQ Engine Upgrades

Activate at next reboot (requires rebooting manually): Select to activate the IQ Engine upgrade from ExtremeCloud IQ to the device at the next reboot of the device.

Activate after 5 seconds: Select to enter the number of seconds (from 5, which is the default, to 300) before the IQ Engine upgrade occurs.

Activate at the following time according to the system clock on the updated device: When you select this option, two pull-down menus appear— one for the date and a second one for the time of day. Set the date and time of day you want.

  • When you select Upload, the devices are rebooted automatically. Rebooting devices momentarily disconnects any associated clients from the SSID, which could be disruptive to your network.


Cloud Terms of ServiceEvaluation AgreementData Privacy and Protection

Copyright ©  Extreme Networks, Inc. 6480 Via Del Oro, San Jose CA, 95119 USA