Cisco Cisco NAC Appliance 4.9.5 Technisches Handbuch
Deploy NAC Profiler in an Existing Out−of−Band
NAC
NAC
Document ID: 107703
Contents
Introduction
Prerequisites
Requirements
Components Used
Conventions
Background Information
NAC Profiler Overview
NAC Overview
Configure
Configuration Guide Overview
Network Diagram
Configurations
Configure NAC Profiler and Collectors in an Out−of−Band Solution
Configure the NAC Collector
Configure the Access Switch to Send SNMP Traps to the NAC Collector
Configure the Access Switch on the Profiler to Gather SNMP Information
Configure the ETH3 Switchport of the NAC Collector on the Distribution Switches for SPAN
Verify
Support for Configuration of NTP
Related Information
Prerequisites
Requirements
Components Used
Conventions
Background Information
NAC Profiler Overview
NAC Overview
Configure
Configuration Guide Overview
Network Diagram
Configurations
Configure NAC Profiler and Collectors in an Out−of−Band Solution
Configure the NAC Collector
Configure the Access Switch to Send SNMP Traps to the NAC Collector
Configure the Access Switch on the Profiler to Gather SNMP Information
Configure the ETH3 Switchport of the NAC Collector on the Distribution Switches for SPAN
Verify
Support for Configuration of NTP
Related Information
Introduction
This deployment guide describes how to implement the Cisco NAC Profiler Server and Cisco NAC Profiler
Collectors (located on the Cisco NAC Appliance Clean Access Server) in a Out−of−Band (OOB) Campus
deployment. This document describes how to best deploy the Cisco NAC Profiler in an existing OOB High
Availability NAC deployment. It is intended to help you understand the basic features and topology of a Cisco
NAC Profiler solution integrated with the Cisco NAC Appliance. It also helps you understand how endpoint
information about all NAC−less devices is sent from the Collectors to the Profiler Server. The goal of the
solution is to profile the endpoints and add them to the Device Filter list of the Cisco NAC Appliance Clean
Access Manager (CAM) in order to apply the appropriate policy.
Collectors (located on the Cisco NAC Appliance Clean Access Server) in a Out−of−Band (OOB) Campus
deployment. This document describes how to best deploy the Cisco NAC Profiler in an existing OOB High
Availability NAC deployment. It is intended to help you understand the basic features and topology of a Cisco
NAC Profiler solution integrated with the Cisco NAC Appliance. It also helps you understand how endpoint
information about all NAC−less devices is sent from the Collectors to the Profiler Server. The goal of the
solution is to profile the endpoints and add them to the Device Filter list of the Cisco NAC Appliance Clean
Access Manager (CAM) in order to apply the appropriate policy.
Prerequisites
Requirements
You must first configure your Cisco NAC Manager, Cisco NAC Server, and Cisco NAC Profiler in
accordance with the installation and configuration guides for each product.
accordance with the installation and configuration guides for each product.
Components Used
The information in this document is based on these software and hardware versions:
NAC Manager (192.168.96.10 HA Service IP)
•