NAC-CAS vs. NAC-NM

Answered Question

Hi,

I have central site with 50 users, without branches. Can I deploy just NAC-NM instead of CAS and if I use NAC-NM in 2811 ISR is there any bandwidth limitation when it is compared to CAS solution? In general, what is throughput for CAS (3310) and what for NAC-NM ???

Correct Answer by clausonna about 8 years 4 months ago

Yes, the NM will work in inline mode, but as with all CAS's it can support only one mode (inline or OOB) at a time.


We're desigining our inline CAS-NM solution now in our lab, and I had similar concerns regarding throughput. I opened a TAC case and was assured that the NM CAS can do full gig throughput. Our testing showed that our router platform (an ISR 2821) can only do about 20mbps, though, even with all features turned off.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
cdusio Sat, 02/07/2009 - 05:09
User Badges:
  • Bronze, 100 points or more

The 3310 can handle up to ~ 1 Gig in in-band deployment. OOB is handled as a licensing restriction same as the NAC-NM


The NAC-NM is licensed per user but it does OOB... It's based on simultaneous users...


All NAC products are licensed by this feature so that same licensing is required for a CAS as well.


-HTH



cdusio Mon, 02/09/2009 - 06:55
User Badges:
  • Bronze, 100 points or more

By servers are you talking about servers at the local side? Normally that would not be an issue as once end stations are authenticated, the NAC is not in the way anymore. Same would apply to servers over the WAN.




cdusio Tue, 02/10/2009 - 03:40
User Badges:
  • Bronze, 100 points or more

I don't think I can answer that because I don't see anything out there that says "throughput is this".. It's all about simultaneous users. I did find something that referencecs the fact that the module does connect over HIMI feature which is a gig connection to the router from the service module.


http://www.cisco.com/en/US/prod/collateral/modules/ps2797/ps8788/prod_qas0900aecd806bfe39_ps6128_Products_Q_and_A_Item.html


You can check this article on 2811 performance..


http://www.smbdesignweb.co.uk/bbt/download/CiscoISR_2811_v1.pdf


HTH


-C


Correct Answer
clausonna Tue, 02/17/2009 - 08:46
User Badges:
  • Bronze, 100 points or more

Yes, the NM will work in inline mode, but as with all CAS's it can support only one mode (inline or OOB) at a time.


We're desigining our inline CAS-NM solution now in our lab, and I had similar concerns regarding throughput. I opened a TAC case and was assured that the NM CAS can do full gig throughput. Our testing showed that our router platform (an ISR 2821) can only do about 20mbps, though, even with all features turned off.

Actions

This Discussion