Specifications

Contents

Cisco NAC Appliance - Clean Access Manager Configuration Guide

OL-28003-01

Display/Edit/Delete Cisco ISE Profiler Details 2-31

Synchronize Endpoints from Cisco ISE Profiler 2-32

Map Endpoint Policies 2-33

Create New Rule 2-33

View Rules 2-35

Edit Rules 2-35

Delete Rules 2-36

Order Rules 2-36

Configure NAC Manager in ISE Profiler 2-36

Troubleshooting when Synchronizing the Cisco ISE 2-38

Example Scenarios 2-38

Switch Management: Configuring Out-of-Band Deployment 3-1

Overview 3-1

In-Band Versus Out-of-Band 3-2

Out-of-Band Requirements 3-2

SNMP Control 3-4

Network Recovery for “Off Line” Out-of-Band Switches 3-4

Deployment Modes 3-5

Basic Connection 3-5

Out-of-Band Virtual Gateway Deployment 3-6

Flow for OOB VGW Mode 3-8

Out-of-Band Real-IP Gateway Deployment 3-10

Flow for Out-of-Band Real-IP Gateway Mode 3-12

L3 Out-of-Band Deployment 3-13

Configure Your Network for Out-of-Band 3-14

Configure Your Switches 3-15

Configuration Notes 3-15

Example Switch Configuration Steps 3-16

OOB Network Setup/Configuration Worksheet 3-21

List of MIBs and OIDs 3-22

Configure OOB Switch Management on the CAM 3-25

Add Out-of-Band Clean Access Servers and Configure Environment 3-25

Configure Global Device Filters to Ignore IP Phone MAC Addresses 3-28

Configure Group Profiles 3-28

Add Group Profile 3-29

Edit Group Profile 3-29

Configure Switch Profiles 3-30

Add Switch Profile 3-31

Configure Port Profiles 3-33