Cisco Cisco NAC Appliance 4.1.0
Cisco NAC Appliance - Clean Access Manager Installation and Administration Guide
OL-12214-01
Chapter 3 Device Management: Adding Clean Access Servers, Adding Filters
Global Device and Subnet Filtering
See
and the Cisco NAC Appliance - Clean Access
Server Installation and Administration Guide for further details.
Order Device Filter Wildcard/Range Policies
The Order page is for wildcard/range device filters only. The Order page is used to change the priority
of wildcard/range device filters.
of wildcard/range device filters.
For example:
•
If the Order page is configured with filters as follows:
1.
00:14:6A:* — Access Type: DENY
2.
00:14:6A:6B:* — Access Type: IGNORE
A device with MAC address 00:14:6A:6B:60:60 will be denied.
•
If the Order page is configured as follows:
1.
00:14:6A:6B:* — Access Type: IGNORE
2.
00:14:6A:* — Access Type: DENY
A device with MAC address 00:14:6A:6B:60:60 will have access type IGNORE.
However, if a device filter exists for the exact MAC address 00:14:6A:6B:60:60, the rules of that filter
apply instead, and any existing wildcard/range filters are not used.
apply instead, and any existing wildcard/range filters are not used.
1.
Go to Device Management > Filters > Devices > Order
Figure 3-6
Order
2.
Click the arrows in the Priority column to move the priority of the wildcard/range filter up or down.
3.
Click Commit to apply the changes. (Click Reset to cancel the changes.)