Cisco Cisco Clean Access 3.5

This chapter describes how to add and manage Clean Access Servers from the Clean Access Manager 
(CAM), and configure device/subnet filters. Topics include: 

For details on Roaming, see 

For details on configuring switch devices using the license-enabled Out-of-Band Switch Management 
module, see 

The first step in implementing Cisco Clean Access is configuring devices in the Clean Access Manager’s 
administrative domain. Clean Access Servers must be added to the CAM in order to manage them 
directly in the console. Other devices can be filtered in the CAM to control their authentication 
requirements and network access. 

For any device, you can control network traffic to or from the device or set up filters for the device. A 
filter controls how a device (or multiple devices by subnet) accesses the network by: 

Allowing the device to access the network without user authentication 

Blocking the device 

Exempting a device from authentication and allowing restricted access through a user role.

You can use filters to bypass authentication requirements (the login page) for specified devices. You can 
also use filters to restrict network access to a device that is allowed to bypass authentication 
requirements, or use a filter to assign the device a Cisco Clean Access system user role.