Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NAC appliance (CAM and CAS)

Has anyone implement NAC appliance (CAM and CAS) in virtual Gateway OOB mode. VLAN mapping concept is used to map a quarantined VLAN to a trusted VLAN.

Is looping an issue here?

Pls advise the pros and cons of using this as we need more information from the field to gauge the stability and ease of use of this network posture and access control method.

Any advice is highly appreciated. Thanks.

1 REPLY
Silver

Re: NAC appliance (CAM and CAS)

The Enable L2 strict mode for Clean Access Agent feature requires the Clean Access Agent to get the client MAC address. The ActiveX/ Java Applet MAC address fetch is currently not enabled for L2 strict mode in L3 OOB deployment.

A new checkbox and dropdown menu is added for "Use Active X or Java Applet to detect client MAC address when Clean Access Server cannot detect the MAC address" in the following user login configuration pages:

CAM web console: Administration > User Pages > Login Page > List [Edit] | General

CAS management pages: Device Management > CCA Servers > Manage [CAS_IP] > Authentication > Login Page > List [Edit] > General

?Device Management > Clean Access > Clean Access Agent > Updates (version information for updates to L3 Java Applet Web Client and L3 ActiveX Web Client)

In addition, the web login pages for L3 OOB users will reflect status information related to loading the Active X control or Java applet, and renewing the client IP address

115
Views
0
Helpful
1
Replies
CreatePlease to create content