Cisco Cisco NAC Appliance 4.1.0

This chapter describes how to configure role-based traffic control policies, bandwidth management, 
session and heartbeat timers. Topics include:

For details on configuring user roles and local users, see 

For details on configuring authentication servers, see 

For details on creating and configuring the web user login page, see 

You can control the in-band user traffic that flows through the Clean Access Server with a variety of 
mechanisms. This section describes the Traffic Control, Bandwidth, and Scheduling policies configured 
by user role. 

For new deployments of Cisco NAC Appliance, by default all traffic from the trusted to the untrusted 
network is allowed, and traffic from the untrusted network to the trusted network is blocked for the 
default system roles (Unauthenticated, Temporary, Quarantine) and new user roles you create. This 
allows you to expand access as necessary for traffic sourced from the untrusted network.