Specifications

2-26
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 2 Device Management: Adding Clean Access Servers, Adding Filters
Global Device and Subnet Filtering
View Active Layer 2 Device Filter Policies
The Active Layer 2 In-Band Device Filters list displays all clients currently connected to the CAS,
sending packets, and with their MAC addresses in a device filter. This list is especially useful in cases
where users are configured to bypass authentication (via device filters) and/or posture assessment (such
as when no requirements are enforced). Though by definition these users will not appear in the Online
Users list or Certified Devices List, they can still be tracked on the In-Band network through the Active
Layer 2 Device Filters List.
Note For more information on In-Band vs. Out-of-Band client machine behavior based on specified Device
Filter type, see In-Band and Out-of-Band Device Filter Behavior Comparison, page 2-16.
To view active Layer 2 devices in filter policies across all Clean Access Servers:
Step 1 Go to Device Management > Filters > Devices > Active.
Step 2 Click the Show All button first to populate the Active page with the information from all clients
currently connected to the CAS, sending packets, and with their MAC addresses in a device filter.
You can also perform a Search on a client IP or MAC address to populate the page with the result. By
default, the Search parameter performed is equivalent to “contains” for the value entered in the Search
IP/MAC Address field.
Note For performance considerations, the Active page only displays the most current device information when
you refresh the page by clicking Show All or Search.
Figure 2-11 Active
Note To view active devices for an individual CAS, go Device Management > CCA Servers > Manage
[CAS_IP] > Filter > Devices > Active.