ExtremeCloud IQ Site Engine (XIQ-SE) flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Site Engine application server

The central server hosting the web GUI, databases, and core services; it coordinates distributed remote servers and stores inventory, policy, and monitoring data.

Distributed remote server

A separate server in a Site Engine deployment that hosts services such as captive portal, RADIUS authentication, or site-local engines, offloading work from the application server.

Feature-based licensing

Site Engine licenses are sold per feature and per device count; wired management, NAC, Analytics, and wireless each have separate entitlements enforced at onboarding.

License overage behavior

When the licensed device count for a feature is exceeded, additional devices of that type cannot be onboarded as managed until licenses are added or devices are removed.

First-time console setup

Initial CLI configuration sets hostname, management IP, gateway, DNS, NTP, and admin password before the web GUI is reachable for the setup wizard.

NTP requirement

Accurate time synchronization is required for certificates, log correlation, NAC session timing, and trust between distributed servers; configure NTP during initial setup.

Supported upgrade path

Release notes define which versions can upgrade directly; some releases require installing an intermediate version before reaching the target release.

Pre-upgrade backup

A full database and configuration backup plus verified free disk space must be completed before starting a Site Engine software upgrade.

Seed device discovery

Discovery starts from one known device and walks its neighbor tables (LLDP/CDP/EDP/FDP) to find and add connected devices to inventory.

Subnet scan discovery

Discovery probes a defined IP range or subnet with configured SNMP and CLI credentials to identify reachable, manageable network devices.

Device profile

A profile bundles credentials, firmware, and configuration templates for a device family; a discovered device must match one to be fully managed.

Onboarding license check

A device is added to managed inventory only if a license is available for its feature set; otherwise it remains unmanaged or is rejected.

Site hierarchy

A tree of World, region, site, building, and floor; devices, maps, and policies bind to levels and inherit settings downward.

Topology map

An auto-generated map of device links built from neighbor discovery protocols, showing link status and device health with color-coded icons.

Floorplan map

An image-based map where APs and devices are placed by location; AP placement supports wireless coverage and heat-map views.

NAC evaluation order

Extreme Control processes authentication first, then authorization rules and role assignment, then enforcement such as VLAN, ACL, or reauthentication.

First-match rule evaluation

Rules in a rule set are evaluated top-down and the first matching rule's role and action apply, so rule order and specificity determine outcomes.

Role definition

A role specifies network access for authenticated users: VLAN assignment, ACL or filter, bandwidth limits, and reauthentication period.

Fabric service mapping

In an Extreme Fabric Connect deployment, NAC roles map users into fabric services using I-SIDs and VSNs instead of simple VLAN assignment.

ExtremeCloud IQ Controller

An on-premises wireless controller managed by Site Engine via SNMP and CLI credentials; it adopts APs and applies wireless configuration pushed from Site Engine.

Cloud integration token

API credentials or a token connect Site Engine to ExtremeCloud IQ so cloud-managed APs, sites, and clients appear alongside on-premises wireless inventory.

SSID to role mapping

The SSID determines the NAC policy domain and the resulting role and VLAN assigned to a connecting wireless client after authentication.

Alarm versus event

Events are raw log and trap records; alarms are derived from events by correlation rules and carry severity used for notification and map coloring.

Alarm severity levels

Critical, major, minor, warning, and informational severities rank alarms, drive map icon colors, dashboard counts, and notification routing.

SNMP trap and syslog targets

Devices must be configured to send traps and syslog to the Site Engine server address for monitoring, alarm correlation, and event collection.

Authorization group

A Site Engine role assigned to an administrator account that controls GUI and CLI permissions and the device or site scope the account can manage.

External admin authentication

Administrator logins can be validated by RADIUS, LDAP/AD, or TACACS+, with external groups mapped to Site Engine authorization groups.

Configuration backup

A backup captures the Site Engine database and configuration for restore; it should be scheduled, stored off-box, and matched to a compatible software version.

Web certificate replacement

The default self-signed HTTPS certificate should be replaced with a CA-signed certificate so administrators get trusted, warning-free GUI access.

NAC authentication chain

Troubleshooting follows supplicant to switch or AP, to RADIUS, to Site Engine policy, to role and VLAN enforcement, checking logs at each hop.

Credential test tool

A built-in diagnostic that validates SNMP and CLI credentials against a device, confirming reachability and correct access before onboarding.

REST API automation

Site Engine exposes a REST API for scripting creation of devices, sites, policies, and reports; the API account needs appropriate authorization group permissions.