topic RE: NAC device into learning mode? in ExtremeCloud IQ- Site Engine Management Center

NAC device into learning mode?

Jason2 — Mon, 15 Feb 2016 16:30:00 GMT

Hi All! I heard that you can put your NAC device into learning mode to get an idea as to what comes onto the network but I am unsure how to do this? I would like to do this in my lab environment to see how it works. Can anyone give me instructions?

RE: NAC device into learning mode?

Nico_Willamowsk — Mon, 15 Feb 2016 16:50:00 GMT

We do this by the following way. We activate MAC Auth at all ports via Policy Manager and create a Rule "Allow All". In NAC we create a Profile with Response of this Policy "Allow All". Then we create a rule and put in this Profile. So you can see all Clients behind you Switch Ports and in the first step they will be allowed to connect. In other steps you can create End-System Groups and other criteria and do an authentication.

RE: NAC device into learning mode?

Zdeněk_Pala — Mon, 15 Feb 2016 17:13:00 GMT

In rules use pass-through NAC Profile

RE: NAC device into learning mode?

Ronald_Dvorak — Mon, 15 Feb 2016 17:21:00 GMT

You also should forward the client DHCP requests to the NAC as that messages are needed for fingerprinting.

-Ron