Specifications

2-23
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 2 Device Management: Adding Clean Access Servers, Adding Filters
Global Device and Subnet Filtering
Display/Search/Import/Export Device Filter Policies
• Priorities can be defined for ranges (via the Order page).
• A single MAC address device filter (e.g. 00:14:6A:6B:6C:6D) always takes precedence on the filter
List over a wildcard/range device filter (e.g. 00:14:6A:6B:*, or 00:14:6A:*).
• New wildcard/range device filters are always put at the end of the List page. To change the priority,
go to the Order page.
• The role assignment for a single MAC address device filter always takes precedence over other
filters. You can check the role assignment to be used for a MAC address using the Test page.
• The Test page shows which filter will take effect for the MAC address entered.
To filter the list of known devices:
Step 1 You can narrow the number of devices displayed in the filter list (under Device Management > Filters
> Devices > List) using the following search criteria and respective modifiers available in the Filter
dropdown list:
Figure 2-8 Device Filter List—Access Type Modifiers
Step 2
Click the Filter button after entering the search criteria to display the filtered results.
Filter Type Modifier Filter Entry
MAC Address is, is not, contains, starts with,
ends with
Any full or partial MAC address in format
AA:BB:CC:DD:EE:FF
IP Address is, is not, contains, starts with,
ends with
Any full or partial IP address in format
A.B.C.D
Clean Access Server is, is not (Dropdown menu options)
GLOBAL, <CAS_IP_address>
Description is, is not, contains, starts with,
ends with
Any text string
Access Type is, is not (Dropdown menu options)
Allow, Deny, Role-Based, Check-Based,
Ignore
Priority is, is not, contains, starts with,
ends with
Any number