How to Configure Profiles and Credentials


Use the Profiles/Credentials tab to define the authentication credentials used to manage access to your devices through SNMP and CLI (command line interface), and the profiles that use those credentials for various access levels. Extreme Management Center applications need access to devices in order to control certain device functions and retrieve information for device properties views, FlexViews and periodic polling. Managing device access using credentials and profiles consists of creating your credentials, creating the profiles that uses those credentials, and then mapping the profiles to specific devices in the Profile/Device Mapping tab.

Instructions for:

Managing Credentials

Credentials define the authentication values (for example, user names and passwords) used to access your network devices.

  • SNMP Credentials provide support for device management using SNMP.
  • CLI Credentials provide support for device management using the command line interface (CLI).

SNMP Credentials

To create an SNMP credential:

  1. Click or choose Authorization/Device Access from the Tools menu. Select the Profiles/Credentials tab in the Authorization/Device Access window.
  2. Select the SNMP Credentials subtab, and click Add Credential. The Add Credential window opens.
  3. Type a name (up to 32 characters) for your new credential and select an SNMP version. If you select SNMPv1 or SNMPv2, the window lets you enter a community name as the password for this credential. If you select SNMPv3, you can specify passwords for Authentication and Privacy.

    SNMPv1/SNMPv2:

    1. Type a community name into the Community Name field.

    SNMPv3:

    1. Type a user name into the User Name field. This is the User Name used for device access.
    2. Select an Authentication Type (MD5, SHA1, or None).
    3. Type the same password (between 1 and 64 characters in length) into both the Authentication Password and the Confirm Password fields. The password fields are disabled when the Authentication Type is set to None.
    4. Select a Privacy Type (DES or None). Privacy settings are disabled when the Authentication Type is set to None.
    5. Type the same password (between 1 and 64 characters in length) into both the Privacy Password and the Confirm Password fields. The password fields are disabled when the Privacy Type is set to None.
  4. Click Apply. You can add another credential or click Close to dismiss the Add Credential window. Your new credential appears in the SNMP Credentials table.

To edit an SNMP credential:

  1. Click   or choose Authorization/Device Access from the Tools menu. Select the Profiles/Credentials tab in the Authorization/Device Access window.
  2. Select the SNMP Credentials subtab, and select the credential that you want to edit from the SNMP Credentials table.
  3. Click Edit. The Edit Credential window opens where you can modify the settings for the selected credential.
  4. Type a name (up to 32 characters) for your new credential and select a SNMP version. If you select SNMPv1 or SNMPv2, the window accommodates entering a community name as the password for this credential. If you select SNMPv3, you can specify passwords for Authentication and Privacy.

    SNMPv1/SNMPv2:

    1. Type a community name into the Community Name field.

    SNMPv3:

    1. Type a user name into the User Name field. This is the User Name used for device access.
    2. Select an Authentication Type (MD5, SHA1, or None).
    3. Type the same password (between 1 and 64 characters in length) into both the Authentication Password and the Confirm Password fields. The password fields are disabled when the Authentication Type is set to None.
    4. Select a Privacy Type (DES or None). Privacy settings are disabled when the Authentication Type is set to None.
    5. Type the same password (between 1 and 64 characters in length) into both the Privacy Password and the Confirm Password fields. The password fields are disabled when the Privacy Type is set to None.
  5. Click Apply and Close. The changes to the selected credential appear in the SNMP Credentials table. If the settings are changed for a credential that is currently being used with a profile that is applied to one or more devices, a confirmation dialog is opened to determine how the changes will be handled. You will be asked if you want to change the password on the device(s). You can then select the devices where the password will be changed and, if this user is a valid user on the device(s), then the new password will be set on the device.

To delete an SNMP credential:

  1. Click or choose Authorization/Device Access from the Tools menu. Select the Profiles/Credentials tab in the Authorization/Device Access window.
  2. Select the SNMP Credentials subtab, and select the credential that you want to delete from the SNMP Credentials table.
  3. Click Delete. The selected credential is removed from the table.

CLI Credentials

  NOTE: When configuring CLI Credentials for ExtremeWireless Controllers, you must add the username and password Login credentials for the controller to the Add/Edit Credential window in order for Wireless Manager to properly connect (SSH) to the controller and read device configuration data. However, the Login password must be added to the Configuration password field instead of the Login password field. The username and Configuration password specified here must match the username and Login password configured on the controller.

To create a CLI credential:
  1. Click or choose Authorization/Device Access from the Tools menu. Select the Profiles/Credentials tab in the Authorization/Device Access window.
  2. Select the CLI Credentials subtab, and click Add. The Add Credential window opens.
  3. Specify the user name and passwords for the credential.
  4. Select the type of connection for the credential: SSH or Telnet.
  5. Click OK. Your new credential appears in the CLI Credentials table.

To edit a CLI credential:

  1. Click   or choose Authorization/Device Access from the Tools menu. Select the Profiles/Credentials tab in the Authorization/Device Access window.
  2. Select the CLI Credentials subtab, and select the credential that you want to edit from the CLI Credentials table.
  3. Click Edit. The Edit Credential window opens where you can modify the settings for the selected credential.
  4. Click OK. The changes to the selected credential appear in the CLI Credentials table.

To delete a CLI credential:

  1. Click or choose Authorization/Device Access from the Tools menu. Select the Profiles/Credentials tab in the Authorization/Device Access window.
  2. Select the CLI Credentials subtab, and select the credential that you want to delete from the CLI Credentials table.
  3. Click Delete. The selected credential is removed from the table.

Managing Profiles

Profiles are assigned to device models in the Extreme Management Center database. They identify the credentials that are used for the various access levels when communicating with the device.

 NOTE:When configuring profiles for ExtremeWireless Controllers, you must make sure that controllers are discovered using an SNMPv2c or SNMPv3 profile. This profile must also contain SSH CLI credentials for the controller. Wireless Manager uses the controller's CLI to retrieve required information and to configure managed controllers.

To create a profile:

  1. Click or choose Authorization/Device Access from the Tools menu. Select the Profiles/Credentials tab in the Authorization/Device Access window.
  2. In the Device Access Profiles table, click Add Profile. The Add Profile window opens.
  3. Type a name (up to 32 characters) for your new profile and select an SNMP version. If you select SNMPv1 or SNMPv2, you can select credentials for Read, Write, and Max Access. If you select SNMPv3, you can select credentials and security levels for Read, Write, and Max Access.
  4. Select the CLI Credential for this profile. CLI credentials provide support for management of devices using the command line interface (CLI).
  5. Click Apply. You can add another profile or click Close to dismiss the Add Profile window. Your new profile(s) appears in the Device Access Profiles table.

To edit a profile:

  1. Click or choose Authorization/Device Access from the Tools menu. Select the Profiles/Credentials tab in the Authorization/Device Access window.
  2. In the Device Access Profiles table, select the profile that you are editing.
  3. Click Edit. The Edit Profile window opens where you can modify the settings for the selected profile.
  4. Click Apply and Close. The changes to the selected profile appear in the Device Access Profiles table.

To delete a profile:

  1. Click or choose Authorization/Device Access from the Tools menu. Select the Profiles/Credentials tab in the Authorization/Device Access window.
  2. In the Device Access Profiles table, select the profile that you are deleting.
  3. Click Delete. The selected profile is removed from the table.

For information on related windows:

For information on related tasks:

Top