Specifications

CHAPTER

3-1

Cisco NAC Appliance - Clean Access Manager Configuration Guide

OL-28003-01

Switch Management: Configuring Out-of-Band

Deployment

This chapter describes how to configure Cisco NAC Appliance for Out-of-Band (OOB) deployment.

Topics include:

• Overview, page 3-1

• Deployment Modes, page 3-5

• Configure Your Network for Out-of-Band, page 3-13

• Configure Your Switches, page 3-14

• Configure OOB Switch Management on the CAM, page 3-25

• Configure Access to Authentication VLAN Change Detection, page 3-67

• Out-of-Band Users, page 3-68

• OOB Troubleshooting, page 3-71

• Troubleshooting SNMP, page 3-72

See Cisco NAC Appliance - Clean Access Server Configuration Guide, Release 4.9(x) for additional

information on L3 OOB deployment.

Overview

In a traditional In-Band Cisco NAC Appliance deployment, all network traffic to or from clients goes

through the Clean Access Server. For high throughput or highly routed environments, a Cisco NAC

Appliance Out-of-Band (OOB) deployment allows client traffic to pass through the Cisco NAC

Appliance network only in order to be authenticated and certified before being connected directly to the

access network. This section discusses the following topics:

• In-Band Versus Out-of-Band, page 3-2

• Out-of-Band Requirements, page 3-2

• SNMP Control, page 3-4