NAC VLAN Assignment

kwillacey · ‎06-17-2008

If I had a in band solution for wireless and an out of band solution for wired, would it be possible to assign the same vlan for both in/out of band?

For example if I had an employee group that has access to both wired and wireless if an employee were to log on to either could they be assigned to the same employee vlan?

It sounds like it could be possible but I can't find anything that can tell me it can work. Help please, thanks.

trevora · ‎06-17-2008

Theoretically this should be possible however you would need 2 CAS appliances as the CAS can only be either IB or OOB but not both at the same time.

kwillacey · ‎06-17-2008

Yes that would be the case, any resources that can help?

trevora · ‎06-17-2008

I've not come across any documentation that defines this scenario, but I would just configure 2 CAS's (1xIB & 1xOOB) and follow the config guide for each deployment type.

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/413/cam/413_cam_book.html

Hope this helps.

kwillacey · ‎06-18-2008

Thanks for the link but I must admit I have only worked mostly with out-of-band. Are there any guides that focus on in-band?

Any thoughts on issues that may arise from such a configuration?