Specifications

10-48
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 10 Cisco NAC Appliance Agents
Mac OS X Cisco NAC Agent
DiscoveryHost — IP
address
or
FQDN
This setting specifies the Discovery Host address the
Agent uses to connect to the Cisco NAC Appliance
system in a Layer 3 deployment.
RetryDetection 3 0 and
above
If ICMP or ARP polling fails, this setting configures the
Agent to retry <x> times before refreshing the client IP
address.
HttpDiscoveryTimeout 5 3 and
above
The default timeout is 5 seconds. This is the time for
which the HTTPS discovery from Agent waits for the
response from Clean Access Server. If there is no
response for the specified time, then the discovery is
timed out.
The minimum value that can be set is 3. If the value is
set to 1 or 2, the timeout is recognized as 3 seconds.
If this value is set to zero (0), then the Windows default
timeout settings are used.
HttpTimeout 5 3 and
above
The default timeout is 120 seconds. This is the time for
which the HTTP request from Agent waits for the
response. If there is no response for the specified time,
the request is timed out.
The minimum value that can be set is 3. If the value is
set to 1 or 2, the timeout is recognized as 3 seconds.
If this value is set to zero (0), then the Windows default
timeout settings are used.
PingArp
2
20-2• If this value is set to 0, poll using ICMP.
• If this value is set to 1, poll using ARP.
• If this value is set to 2, poll using ICMP first, then
(if ICMP fails) use ARP.
PingMaxTimeout 1 1-10 Poll using ICMP and if no response in <x> seconds,
then declare ICMP polling as failure.
VlanDetectInterval
3,4
55-900 • If this setting is 0, the Access to Authentication
VLAN change feature is disabled.
• By default, this setting is 5 and the Agent sends
ICMP/ARP queries every 5 seconds.
• If this setting is 6-900, ICMP/ARP every <x>
seconds.
1. The RememberMe and the AutoPopup parameters can be set only in the preference.plist file.
2. If the PingArp value is "1", it breaks the VPN connections by removing the Gateway entry. If the value is "0", then it breaks
network connections with Managed subnets on In Band. It is recommended to have the value as “2”.
Table 10-1 Mac OS X Cisco NAC Agent Configuration Parameters (continued)
Parameter
Default
Value
Valid
Range Description/Behavior