cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2300
Views
0
Helpful
3
Replies

Cisco NAC Guruz:=>Differentiate In-Band and Out-Of-Band applied to CAS/CAM Trusted/Untrusted Network

Baerde1234
Level 1
Level 1

Please clarify for me the exact meaning of In-band and Out-Of-Band as it applies to CAS/CAM to get a user authenticated/validated; specifically mentioning the relevance of "trusted network", "untrusted network", "'virtual gateway" etc. so I can get a clearer picture. I appreciate your help.

3 Replies 3

Baerde1234
Level 1
Level 1

Also the exact difference between a Real IP Gateway and a Virtual IP Gateway vis a vis
authentication and certification of a client by the CAS.

Faisal Sehbai
Level 7
Level 7

Esmail,

Inband vs out of band signify the traffic path a client's traffic takes after the authentication/posture-assessment piece has finished. In inband scenarios the traffic always traverses the CAS even after the authentication/PA has happened. In OOB setups, the traffic path is changed and the client traffic goes directly through your core network instead of traversing the CAS. VPN is only supported in IB setups, and Wireless can be OOB only in 4.5.1 and above.

HTH,

Faisal

Thanks for the explanation Faisal. I'm getting more the drift of it now. When I read down further the guide it started to shed me some extra light. In-Band-within the networks NAC primarily funcions(Trusted/Untrusted Network), and out-of-band when NAC finally hands off forwarding to the rest of the non_NAC specific networks.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: