Cisco Cisco NAC Appliance 4.8.0 Installation Guide
2
Getting Started with Cisco NAC Network Modules in Cisco Access Routers
OL-2609-01
About Cisco NAC Network Module for Integrated Services Routers
About Cisco NAC Network Module for Integrated Services
Routers
Routers
The Cisco® NAC Network Module for Integrated Services Routers (NME-NAC-K9) brings the
feature-rich Cisco NAC Appliance Server capabilities to Cisco 2800 and 3800 Series Integrated Services
Routers.
feature-rich Cisco NAC Appliance Server capabilities to Cisco 2800 and 3800 Series Integrated Services
Routers.
In addition, Cisco NAC Appliance Releases 4.8 and later support Cisco 2900 and 3900 Series Integrated
Services Routers.
Services Routers.
Cisco NAC Appliance
Cisco NAC Appliance (also known as Cisco Clean Access) is a Network Admission Control (NAC)
product that allows network administrators to authenticate, authorize, evaluate, and remediate wired,
wireless, and remote users and their machines prior to allowing users onto the network. It identifies
whether networked devices such as laptops, desktops, and corporate assets are compliant with a
network's security policies, and it repairs any vulnerabilities before permitting access to the network.
product that allows network administrators to authenticate, authorize, evaluate, and remediate wired,
wireless, and remote users and their machines prior to allowing users onto the network. It identifies
whether networked devices such as laptops, desktops, and corporate assets are compliant with a
network's security policies, and it repairs any vulnerabilities before permitting access to the network.
Cisco NAC Appliance is a network-centric integrated solution that is:
•
Administered from the web console of the Clean Access Manager (CAM)
•
Enforced through the Clean Access Server (CAS)
•
Applied on clients through the Clean Access Agent (CAA) client software
You can deploy the Cisco NAC Appliance solution in the configuration that best meets the needs of your
network.
network.
Cisco NAC Network Module
The Cisco NAC Network Module (NME-NAC-K9) implements the Clean Access Server functionality
on the next generation service module for the Cisco 2811/2821/2851 and 3825/3845 access routers. The
NAC network module is pre-installed with Cisco NAC Appliance software release 4.1(2) (or later), with
the Clean Access Server software running as the application code.
on the next generation service module for the Cisco 2811/2821/2851 and 3825/3845 access routers. The
NAC network module is pre-installed with Cisco NAC Appliance software release 4.1(2) (or later), with
the Clean Access Server software running as the application code.
In addition, Cisco NAC Appliance Releases 4.8 and later support Cisco 2911/2921/2951 and 3925/3945
access routers.
access routers.
The Clean Access Server operating system is based on an optimized version of Linux. The NAC network
module is an ideal NAC solution for small groups of users in remote locations where an integrated
services router is used. The NAC network module can be equipped with either a 50-user or 100-user
license to support branch offices.
module is an ideal NAC solution for small groups of users in remote locations where an integrated
services router is used. The NAC network module can be equipped with either a 50-user or 100-user
license to support branch offices.
The Clean Access Manager is purchased separately as a NAC-3300 series appliance and is the primary
point of configuration and management for all Clean Access Servers—whether implemented as a Cisco
NAC Network Module in an Integrated Services Router, or as a NAC-3310 or NAC-3350 SERVER
appliance. Once initial configuration is complete, the NAC network module is added and managed by
the Clean Access Manager like any other Clean Access Server through the CAM web console (GUI)
interface.
point of configuration and management for all Clean Access Servers—whether implemented as a Cisco
NAC Network Module in an Integrated Services Router, or as a NAC-3310 or NAC-3350 SERVER
appliance. Once initial configuration is complete, the NAC network module is added and managed by
the Clean Access Manager like any other Clean Access Server through the CAM web console (GUI)
interface.
For further details on the NAC-3300 series server platforms refer to the