Specifications

3-28
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 3 Switch Management: Configuring Out-of-Band Deployment
Configure OOB Switch Management on the CAM
Step 4 When Out-of-Band is enabled, the Monitoring > View Online Users page displays links for both
In-Band and Out-of-Band users and display settings (Figure 3-10). See Out-of-Band Users, page 11-31
for details.
Figure 3-10 View Out-of-Band Online Users
Configure Global Device Filters to Ignore IP Phone MAC Addresses
An important feature of any OOB configuration is to ensure IP phones through which client machines
connect to the network do not inadvertently terminate the client connection when MAC notification
events from the IP phone initiate a change in the network connection like a VLAN change. To do this:
• Configure a global Device Filter (Device Management > Filters > Devices > New or Edit) with the
“Ignore” option for the IP phone MAC address to ensure Cisco NAC Appliance ignores SNMP trap
events from the IP phone
• Enable the Change VLAN according to global device filter list option when you configure the Port
Profile, as described in Add Port Profile, page 3-34.
For more information, see Device Filters for Out-of-Band Deployment Using IP Phones, page 2-15. For
detailed configuration instructions, see Add Global Device Filter, page 2-20.
Configure Group Profiles
When you first add a switch to the Clean Access Manager’s domain (under OOB Management >
Devices), a Group profile must be applied to add the new switch. There is a predefined Group profile
called default, shown in Figure 3-11. All switches are automatically put in the default group when you
add them. You can leave this default Group profile setting, or you can create additional Group profiles
as needed. If you are adding and managing a large number of switches, creating multiple Group profiles
allow you to filter which sets of devices to display from the list of switches (under OOB Management
> Devices > Devices > List).