RE: Questions about NAC

From: Salau,Olayemi (Olayemi.Salau@southampton.gov.uk)
Date: Mon Dec 11 2006 - 10:03:02 ART

• Next message: Leigh Harrison: "Re: Rancid anyone?"
• Previous message: Darby Weaver: "Re: Rancid anyone?"
• Maybe in reply to: Maxim Kurushkin: "Questions about NAC"
• Next in thread: Salau,Olayemi: "RE: Questions about NAC"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Good Job Maxim,

Now one important missing part in your config is the "identity profile and
policy" part

identity profile eapoudp

 device authorize ip address 30.0.0.1 policy christmas

identity policy christmas

 access-group exempt-acl

ip access-list extended exempt-acl

 permit ip any any

This is the whole essence of NAC my friend, you've got to have a policy to
compare your end device with ... you get?

Many Thanks

• Next message: Leigh Harrison: "Re: Rancid anyone?"
• Previous message: Darby Weaver: "Re: Rancid anyone?"
• Maybe in reply to: Maxim Kurushkin: "Questions about NAC"
• Next in thread: Salau,Olayemi: "RE: Questions about NAC"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:37 ART