cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
841
Views
10
Helpful
5
Replies

NAC 4.5 OOB, WLC design question

Aaron D
Level 1
Level 1

We have a centralized NAC server design with a large number of remote sites. With 4.5, I have heard you need Layer 2 adjancency for the WLC's to the NAC servers even if using OOB? Is this correct? This is a serious limitation if so. thanks

1 Accepted Solution

Accepted Solutions

gghayur
Level 1
Level 1

This is correct. You need to have layer 2 adjacency between the CAS Untrusted and WLC. Also, CAS needs to be in Virtual Gateway.

in next major release, we are looking into removing this limitation.

View solution in original post

5 Replies 5

don.click1
Level 4
Level 4

I dont have an answer, but i am also very interested in this. We currently are planning to upgrade to NAC 4.5 for the added ability to do OOB for Wireless.

I have found out from Cisco that L2 adjancency is required. Apparently, the un-authenticated VLAN is sent to the CAS by default. The CAS then assigns based on role after authentication, THEN goes out of band.

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/45/cam/m_woob.html#wp1148691

Wireless Out-of-band implementation of Cisco NAC Appliance requires the following to be in place:

•Cisco Wireless LAN Controllers must be supported models that use at least the minimum supported version of IOS (supporting SNMP traps). See Table 5-2.

•Cisco Wireless LAN Controllers must be Layer 2 adjacent to the Clean Access Server(s) with which they interoperate to support wireless client login.

•Clean Access Servers supporting wireless client login and authentication must be installed and configured in Virtual Gateway mode.

•Your Cisco NAC Appliance product license must enable Wireless OOB.

gghayur
Level 1
Level 1

This is correct. You need to have layer 2 adjacency between the CAS Untrusted and WLC. Also, CAS needs to be in Virtual Gateway.

in next major release, we are looking into removing this limitation.

Is there a special license that is needed for wireless OOB?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: