nacspeed

A utility to send Extreme Networks' NAC authentications to Lightspeed

This tool is for districts that have NAC in conjunction with another 802.1x network not associated with the NAC. It will send NAC authentications to the RADIUS accounting server on the Rocket.

Extreme has a similar utility called OFConnect that does pretty much the same thing. The only problem is, you don't have any options to filter out messages from the NAC end-system log. (For example, in my district, I have a separate SSID for machine cert authentication and all those are sent to Lightspeed.) This overwrites the username reported by the user agent on the machine with host/computername.fqdn.example.net, which is bad.

Prerequisites

• Node.js, ideally 0.8.0 or newer

Instructions

Make sure Node.js is installed on your NetSight server and included in your PATH. Then download the latest release zip or git clone the repo to your machine. Rename config-start.ini to config.ini and edit to suit your environment. Then run node nacspeed.js and watch the magic happen. All dependencies are included in the nacspeed package, so there is no extra installation necessary. Make sure a transparent authentication source is set in your Rocket under Web Filter > Mobile Devices.

Acknowledgements

• Includes node-ini by Roger Mayfield (MIT license)
• Includes node-radius by Nearbuy Systems (BSD license)
• Includes node-tail by Luca Grulla (MIT license)
• Includes zpad (public domain)
• Includes strftime by Sami Samhuri (MIT license)
• Includes watch by Mikeal Rogers (Apache License)