2.9.2. Plugins

In the Plugins tab, you can see all OpenNAC Enterprise plugins and configure them with their corresponding variables.

../../../_images/plugins.png


Note

When enabling or disabling a plugin, we must click on the Save button to save the changes.

Synchronous plugins

The synchronous plugins are executed with the poleval while the device is in the authentication process and permits to change some device parameters.

After the execution of each synchronous plugin, the VLAN ID will be checked, and if the VLAN ID is set to “rejected,” the session status will be automatically updated accordingly. This ensures that the status change is enforced.

Asynchronous plugins

On the other hand, the asynchronous plugins are executed to complement the information or execute other functions when the device is already authenticated. Asynchronous plugins are executed using workers, so the log is stored in /var/log/opennac/opennac-job.log file, and it can be viewed from OpenNAC Enterprise server command line or from OpenNAC Enterprise admin UI in Status > File Log Viewer.

Plugin execution order ensures that during a poleval execution, the plugins are executed in the following order:

  1. Synchronous plugins (based on their Execute order attribute)

  2. Synchronous plugins

  3. Asynchronous plugins

Note

Enabling Verbose Mode in Configuration -> Configuration vars in the Logs section, could generate a huge increase in their size.

Control your free disk space in “/var/log” volume.

In the View plugin management option, we can change the plugins view for a table that shows what plugins have which policies activated.

../../../_images/plugins-policy.png


The output options for the table are: Save as SVG , Save as PNG, View Source and Open in Vega Editor.

In ON NAC -> Policies, you can add the plugins in the policy rule postconditions. When a device passes a policy, the plugins configured on that policy will be executed.

../../../_images/plugins-policy3.png


Administrators can overwrite the plugin parameters using a single policy rule in the Custom params section in postconditions. You can modify the plugins parameters using the respective variable.

../../../_images/plugins-policy2.png