Specifications

2-3
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 2 Device Management: Adding Clean Access Servers, Adding Filters
Working with Clean Access Servers
Step 2 Click the New Server tab.
Figure 2-1 Add New Server
Step 3 In the Server IP address field, type the IP address of the Clean Access Server’s eth0 trusted interface.
Note The eth0 IP address of the CAS is the same as the Management IP address.
Step 4 Optionally, in the Server Location field, type a description of the Clean Access Server’s location or
other identifying information.
Step 5 For In-Band operation, choose one of the following operating modes for the Clean Access Server from
the Server Type list:
• Virtual Gateway – Operates as an L2 transparent bridge, while providing IPSec, filtering, virus
protection, and other services.
• Real-IP Gateway – Acts as the default gateway for the untrusted network.
Step 6 For Out-of-Band operation, you must choose one of the following Out-of-Band operating types:
• Out-of-Band Virtual Gateway—Operates as a Virtual Gateway during authentication and
certification, before the user is switched Out-of-Band (i.e., the user is connected directly to the
access network).
• Out-of-Band Real-IP Gateway—Operates as a Real-IP Gateway during authentication and
certification, before the user is switched Out-of-Band (i.e., the user is connected directly to the
access network).
The CAM can control both In-Band and Out-of-Band Clean Access Servers in its domain. However, the
CAS itself must be either In-Band or Out-of-Band.
For more information on Out-of-Band deployment, see Chapter 3, “Switch Management: Configuring
Out-of-Band Deployment.”
See the Cisco NAC Appliance - Clean Access Server Configuration Guide, Release 4.9(x) for further
details on the CAS operating modes.