Cisco Cisco NAC Appliance 4.1.1 Release Notes

Cisco NAC Appliance does not support the use of a NAT/PAT device, such as a Firewall/Router, placed 
between users and the Clean Access Server in Layer 3 deployments. In Layer 3 deployments, where 
users are multiple hops away from the Clean Access Server, the CAS needs a unique user IP address for 
each client on which NAC enforcement is performed. 

If NAT/PAT is used between the users and the CAS, all users appear to originate from the same IP address 
(the NAT/PATed IP) from a CAS perspective. Hence, only the first user goes through NAC enforcement, 
and after this user is certified, all remaining users are exempted from NAC enforcement.

The NAC-3310 appliance is based on the HP ProLiant DL140 G3 server and is subject to any 
BIOS/firmware upgrades required for the DL140 G3. Refer to 

 for detailed instructions. 

The NAC-3310 appliance (MANAGER and SERVER) requires you to enter the DL140 or serial_DL140 
installation directive at the “boot:” prompt when you install new system software from a CD-ROM.

When following the CD-ROM system software installation procedures outlined in Chapter 2: “Installing 
the Clean Access Manager” of the

 and Chapter 4: “Installing the Clean Access Server NAC 

Appliance” of the

, users installing release 4.1(1) on a NAC-3310 appliance (both MANAGER and 

SERVER) from a CD-ROM are presented with the following prompt during the installation process:

Cisco Clean Access Installer (C) 2007 Cisco Systems, Inc. 

Welcome to the Cisco Clean Access Installer! 

- To install a Cisco Clean Access device, press the <ENTER> key. 

- To install a Cisco Clean Access device over a serial console, enter serial at the boot 

prompt and press the <ENTER> key.

boot: