Extreme Networks

This guide covers Enterasys B/C-Series switches, Enterasys 800-Series switches, WM wireless controllers, and switches running ExtremeXOS (XOS) or the legacy ExtremeWare software.

Enterasys B/C-Series

The B-Series and C-Series SecureStack switches run Enterasys EOS with a set-based CLI.

Create a backup account. A read-only login is sufficient to display the configuration:

set system login netwatch-backup read-only enable
set password netwatch-backup

Enter the new password when prompted.

Enable SSH.

set ssh enabled

If your firmware supports host access control lists, restrict management access to the Netwatch collector's IP address.

Notes. If your firmware release does not show the complete configuration to read-only logins, use a read-write or super-user login instead.

Enterasys 800-Series

The 800-Series switches use a menu/command interface that differs from SecureStack EOS.

Create a backup account. Create a dedicated netwatch-backup administrator in the switch's user management. These switches do not provide a useful read-only role for full configuration display, so an admin-level account is required.

Enable SSH. Enable the SSH server in the switch's management settings. If the model or firmware lacks SSH, enable Telnet and keep management traffic on a trusted network, restricted to the collector's IP where the switch supports trusted-host settings.

WM

The WM wireless controllers are managed through a web UI and a CLI.

Create a backup account. Create a dedicated netwatch-backup administrator in the controller's user management. Use a read-only administrator role if your release provides one; otherwise full administrator rights are required to display the configuration.

Enable SSH. Enable SSH management access on the controller's management interface and, if the controller supports management access lists, restrict access to the Netwatch collector's IP.

XOS / ExtremeWare

ExtremeXOS runs on Summit, BlackDiamond, and current Extreme switching platforms; ExtremeWare is the legacy software on older Summit and Alpine switches.

Create a backup account. A user-level (read-only) account can normally display the configuration:

create account user netwatch-backup

Enter the password when prompted. If your software version does not permit show configuration for user-level accounts, create an admin-level account instead:

create account admin netwatch-backup

Enable SSH.

enable ssh2

On ExtremeXOS, SSH requires the optional security module (ssh.xmod) to be installed on some versions; on ExtremeWare, SSH requires a security license. Where SSH is unavailable, use Telnet on a trusted management network. You can restrict SSH access with an access profile or ACL policy applied to the SSH service.

Notes. QUARK reads the configuration with show commands only. On chassis systems no special preparation is needed beyond reachability of the management IP.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.