Step 2 Configuring the Cisco NAS Interfaces Cont

Cleari%£cess Server Type: Virtual Gateway

Cleari%£cess Server Type: Virtual Gateway

0 Enable L3 support

Enable L2 strict mode for Clean Access Agent Trusted Interface (to protected network) IP Address Subnet Mask

Default Gateway 10.10 101

10.10.10.2

10.10.10.2

255.255.255.0

CD Pass through VLAN ID to managed network

(Make sujrthe Clean Access Server is on VLAN n before

I Update

Untrusted Interface (to managed network) IP Address Subnet Mask Default Gateway

EH Pass through VLAN ID to protected network management VLAN ID to n.)

© 2007 Cisco Systems, Inc

Step 3 Click the Network tab. The IP form appears showing the network settings for the Cisco NAS interfaces.

Step 4 Check the Enable L3 support check box. With this option selected, the Cisco NAS allows access to all users from any number of hops away. When the Enable L2 strict mode for Clean Access Agent option is selected, the Cisco NAS does not allow network access to client machines configured with the Cisco NAA who are more than one hop away from the Cisco NAS. The user with a Cisco NAA configured on their machine will have to be Layer 2-connected to the Cisco NAS before gaining access to the network.

Step 5 In the Trusted Interface area, enter the appropriate network settings for the trusted (eth0) interface in the corresponding fields. The trusted interface IP address should be on a different subnet from the subnet of the untrusted interface.

Step 6 In the Untrusted Interface area, enter the appropriate network settings for the untrusted (eth1) interface in the corresponding fields. The untrusted interface IP address should be on a different subnet from the subnet of the trusted interface.

Step 7 Click the Update button.

Step 8 Click Reboot. The Cisco NAS will show a status of Not Connected while it reboots. Wait until the Cisco NAS shows a Connected status.

© 2007 Cisco Systems, Inc. Cisco NAC Appliance Implementation 3-19

Continue reading here: Step 4 Configuring Cisco Nas Vlan Settings

Was this article helpful?