NAC agent error while connected to wired network

fashour · ‎08-25-2010

We have this senario: out of band L2 NAC deployment for wireless. Everything works great, however, when the client is connected to wired network which is not part of the NAC enforcement, we get this Error popping up over and over again:

Invalid switch configuration-OOB Error: OOB client x:x:x:x:x/y.y.y.y not found

I know that this error is coming because the switch is not added in the CAM. We can mask the issue by either unchecking the popup option on the NAC agent icon in system tray or changing the CAS ip on the NAC agent to unreachable address. Moreover, IP connectivity of the client is not affected by this message as we can reach the network from the client. The only issue is that we have the popup. Is there a way to stop the agent from doing SWISS discovery when on wired network? Any insight would be appreciated.

Faisal Sehbai · ‎08-25-2010

Hello,

You can set the agent to not AutoPop, but that would be the default then and it wouldn't pop up on the Auth networks when the users will have to do it manually.

Current versions don't have the capability to not SWISS on one network and do it on the others.

For more on the options available for client configuration, please review here:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_agntd.html#wp1348376

HTH,

Faisal

fashour · ‎08-25-2010

Are there plans to support SWISS out of wireless interface and not wired as per our example?

Faisal Sehbai · ‎08-26-2010

Fadi,

Not that I know of. I'll double check and update you.

Faisal

Bryan Wulfric · ‎04-04-2012

Hi Faisal,

I'm facing similar issue with wireless NAC user, not to wired NAC user. Some wireless NAC user cannot login to their NAC agent, the error message is OOB Error: connected device not found. When this happen, i user clear mac address-table dyna on switches. I wonder if there are some parameter that i need to tune in the NAC or WLC or the switches?

Thanks.