Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NAC and changing IP address

Hi All,

we are using NAC OOB, L3, Real IP gateway with AD-SSO. when users log in to the PC, PC is supposed to change the IP address after authentication with windows user account. But based on security policy, users don't allow to change IP address, so changing IP address will be failed. is there any workaround for this matter? should we change our security policy and let users to have right to change IP address?

in this case, what security in GPO we have to modify to give them permission to do "ipconfig /renew" command right?

any suggestion would be very appreciated.

thanks

Alex

1 ACCEPTED SOLUTION

Accepted Solutions

Re: NAC and changing IP address

You need to install the stub first with admin rights. Then once the user logs in with his own rights (non-admin) and he needs to do anything administratively (like change IP), the agent requests the stub to do it and it works.

Check the link I sent out. It has much more details :)

HTH,

Faisal

5 REPLIES

Re: NAC and changing IP address

Alex,

Install the stub first for the agents, and then let the users install the agent with their own rights. This way when the agent needs to do something with admin rights, it will ask the stub.

Details: http://tinyurl.com/yfodvn9

HTH,

Faisal

New Member

Re: NAC and changing IP address

Hi Faisal,

what do you mean admin right? which admin is inside stub? windows admin?

thanks again for your fast reply.

Alex

Re: NAC and changing IP address

You need to install the stub first with admin rights. Then once the user logs in with his own rights (non-admin) and he needs to do anything administratively (like change IP), the agent requests the stub to do it and it works.

Check the link I sent out. It has much more details :)

HTH,

Faisal

New Member

Re: NAC and changing IP address

Hi Faisal,

as i know, stub installation is not included/supported in NAC 4.7. How to solve this issue with IP address renew?

Ladislav.

Re: NAC and changing IP address

Ladislav,

4.6 and above install a service with the agent. The role of stub is now played with that service.

HTH,

Faisal

568
Views
10
Helpful
5
Replies
CreatePlease login to create content