Cisco NAC Network Module Server License, UPG NACNM-50UL= Hoja De Datos
Los códigos de productos
NACNM-50UL=
Data Sheet
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 3 of 7
Deployment Modes
The Cisco NAC network module can be deployed in several ways to best accommodate your branch network
security requirements. Figure 2 shows the NAC network module within a Cisco 2800 or 3800 Series Integrated
Services Router or 2900 or 3900 G2 Series Integrated Services Router for a branch office. The 100 or fewer
employees in the branch office utilize the Clean Access Server functions on the NAC network module before being
allowed access to the network. Similarly, campus employees use the Clean Access Server functions on the local
NAC Appliance. A centralized Clean Access Manager across the WAN is required to configure and manage several
NAC network modules or NAC appliances deployed in multiple office locations of this enterprise customer.
Figure 2. Typical Branch Office Deployment Scenario for Cisco NAC Network Module in an Integrated Services Router
Table 1.
Cisco NAC Network Module Deployment Options
Deployment Model
Options
Passing traffic mode
●
Virtual gateway (bridged mode)
●
Real IP gateway (routed mode)
Client access mode
●
Layer 2 (client is adjacent to the Clean Access Server)
●
Layer 3 (client is multiple hops from the Clean Access Server)
Traffic flow model
●
In-band (Clean Access Server is always in line with user traffic)
●
Out-of-band (Clean Access Server is in line only during authentication, posture assessment, and remediation)