Enterasys Networks 2S4082-25-SYS Manual

A SERVICE OF

next previous

Enterasys NAC Controller Hardware Installation Guide 6-1

6

Initializing the NAC Controller

ThischapterprovidesadetaileddiscussionoftheNAC Controllersoftwareinitialzation.

Overview

TheNACControlleriscomposedoftwosubcompents,thePolicyEnforcementPoint(PEP)and

theEngine.EachcomponenthasanIPaddress,andthecomponentsaremanagedjointlyinthe

operationoftheNACControlleronthenetwork.WhenconfiguringtheNACControllerforIP

connectivityinthenetworktopology,it

isimportanttoconsiderboththeNACControllerPEPand

NACControllerEngineasdescribedbelow.

TwomanagementconfigurationsfortheNACControlleraresupporteddependingonthe

managementtopologyofyournetwork:in‐bandmanagementorout‐of‐bandmanagement.For

thein‐bandmanagementconfiguration,allmanagementtrafficsourced

fromtheNACController

isgeneratedontothedataVLANalongwithendsystemtrafficthatistraversingtheappliance.

Fortheout‐of‐bandmanagementconfiguration,allmanagementtrafficsourcedfromtheNAC

ControllerisgeneratedonadifferentVLANthantheendsystemtraffic.Moredetailsaboutthese

managementconfigurationsasrelatedtorequiredsettingsofadjacentnetworkinfrastructure

devicesareexplainedbelow.Eitherthein‐bandorout‐of‐bandmanagementconfigurationis

supportedfortheLayer2(L2)andLayer3(L3)NACController.Therefore,oneofthefollow ing

configurationsmustbeselectedastheinstallationtype

duringtheintializationoftheNAC

Controller:

•Layer2NAC ControllerwithIn‐BandManagement

•Layer2NAC ControllerwithOut‐Of‐BandManagement

•Layer3NAC ControllerwithIn‐BandManagement

•Layer3NAC ControllerwithOut‐Of‐BandManagement

For information about... Refer to page...

Overview 6-1

General Management Considerations 6-3

Preparation for NAC Controller Initialization 6-6

The NAC Controller Initialization Procedure 6-7

The NAC Controller Policy Configuration 6-16

Note: The NAC Controller software initialization will take place within a single discussion.

Unless otherwise specified, the content of the discussion applies to all four installation

types.