Support User Manuals

Enterasys Networks 2S4082-25-SYS Switch User Manual

Open as PDF

of 108

The NAC Controller Policy Configuration

Enterasys NAC Controller Hardware Installation Guide 6-17

SeeFigure 6‐24tohelpvisualizehowyouwoulddeterminetheNAC Controllermodeof

operation.Startingattheend‐userandmovingupstream,thepositionofthefirstNAC Controller

isdownstreamofthefirstrouterinitspath.ThisNAC ControllerfunctionsinL2operations

mode.Continuingtomoveupstreampast

therouter,thenextNAC Controllerisupstreamofthe

firstrouterinitspath.ThisNAC ControllerfunctionsinL3operationsmode.

Figure 6-24 Determining NAC Controller Mode of Operation

NACControllersofthesamemodeofoperationmustbyassignedtotheirownuniquepolicy

domain.Forexample,youcanhavemultipleL2NACControllersinonedomain

andmultipleL3

NACControllersinanotherdomain,butyoucanʹtcombineL2andL3NACControllersinthe

samedomain.

BecausethetwoNAC ControllersshowninFigure 6‐24areofdifferentoperationalmodes,they

musteachbelongtoaseparatepolicydomainfromeachotheraswellasany

otherswitchinthe

network.

AssurethatallNAC Controllersofthesameoperationalmodeareinapolicydomainnotshared

withanyNAC Controllerofadifferentoperationalmodeoranynon‐NAC Controllerswitchtype.

Note: NAC Controllers can not share the same policy domain with any other

non-NAC Controller switch type.

previous next