Hi Rob,

Thanks for your solution. Indeed i am aware that a NAM can control both CAS configured as in-band and out-of band.

But i want to know whether the CAS can be operated in both inband and outband simultaneously?

Hope you will give me some input on this

Hi R.B.Kumar,

No, isn't possible to run IB and OOB simultaneously on one CAS.

for more info:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/45/cas/s_deploy.html

Thank you Rob,

I appreciate you effort in explaining the concept. I also have one setup here for which i am going to configure the NAC. Can you please explain how it works.

REQUIREMENT:

I am configuring NAC Appliance. The following is the deployment scenario.

I am establishing this in a campus LAN environment.

I have a Cisco 4510R Layer 3 switch as the Core switch.

I have Cisco 3550 Layer 3 switch as the distribution switch

I have some unmanaged and managed switch as the Access layer Switches. All Desktop computers are connected in this access swtich only.

Distribution Switch and core switch is connected in the Routed backbone (Trunking is not configured between Distribution and Core)

Since I have unmanaged switches at the access layer and Core to Distribution is Routed backbone (Layer 3) i have decided to configure the NAC appliance in the following setup:

Layer 3 Inband Virtual Gateway

I request you to provide solution and configuration steps to achieve the following:

1. What will be the VLAN the ETH0 & ETH1 of CAS will be in.

2. Users/Desktop computers should authenticate by username/password & Mac Address/IP address to get into the network. If the Users/Desktop computers do not match the IP address with MAC Address combination configured in the NAC appliance they should be in quarantine role.

regards