topic Does Cisco NAC support for HP Switches in Network Access Control

Does Cisco NAC support for HP Switches

Magesh G. — Mon, 11 Mar 2019 01:39:58 GMT

Dear all,

the existing network has HP switches , is there any way i can deploy Cisco NAC solution here ?

Pls revert .

thanks ,

Does Cisco NAC support for HP Switches

Tarik Admani — Thu, 29 Dec 2011 06:15:40 GMT

No we do not support other switches for NAC outside of Cisco, it was never tested so it was never supported. I am sure if you understand how nac works you can get this to work however, it would be difficult to get support from either HP or Cisco since this isnt supported. However for an inband solution you may be able to get this to work, however for OOB you are out of luck, all the SNMP libraries arent present for any other products but cisco, nor can you add them either.

Thanks,

Tarik Admani

Does Cisco NAC support for HP Switches

jonmarso_07 — Sat, 31 Dec 2011 18:38:39 GMT

My friend for the NAC support other brands of equipment is necessary to configure it in-band mode.

Does Cisco NAC support for HP Switches

jonmarso_07 — Sat, 31 Dec 2011 18:40:23 GMT

Mode in-band traffic passes through the NAC, and this can be a problem.

OOB mode it is adjacent then today is a most widely used solution, but go in there and test the band because only this will work perfectly in your environment.

Does Cisco NAC support for HP Switches

boulest — Wed, 16 May 2012 14:10:22 GMT

I am implementing NAC in a very large network, I want to make sure it will work with all types of switches. If I implement it in In-band Mode, will this guarantee work with any switch vendor?

Does Cisco NAC support for HP Switches

prajith.ep — Tue, 23 Jul 2013 11:04:20 GMT

I am also having the same issue. I have configured NAC in In-Band mode.NAC is connected to HP Procurve 5406. But its its not working with HP Procurve, however if I connect NAC with Cisco L3, it works fine. How can I make it work with HP.

Does Cisco NAC support for HP Switches

boulest — Tue, 23 Jul 2013 12:51:24 GMT

Cisco NAC has lots of limitations, and surly this is one of them. But while I respect the fact that cisco will not support NAC on HP switches. It can work. And it will perform just fine, once you understand “Cisco NAC” and able to configure it for the first time, you will be able to support it without the need of TAC.

The idea is that Cisco NAC sends commands to the switches on the network to apply specific access list or Vlan changes, since Cisco can only speak Cisco, it does not know how to tell other switches to do that. . The work around is that you would have the NAC running in in-line mode on your network, yes this will introduce a bottleneck, but that is the only way to do it. The NAC then will look at the traffic based on the MAC or IP and apply set of policies depending on the source or the destinations.

Please do your research and look at other NAC solutions before you decide the best vendor to go with.

Does Cisco NAC support for HP Switches

prajith.ep — Tue, 30 Jul 2013 09:30:02 GMT

I am not at all able to make NAC work with HP switch, Please advice me how to configure the HP switch so that NAC will work

Re: Does Cisco NAC support for HP Switches

mlezerkiewicz — Sat, 03 Aug 2013 00:28:48 GMT

If you are planning on very large install OOB is the way to go for wired and wireless. You will not be able support more than 40 CASes and i encounter problems with 4.9.1 at 16 HA OOB pairs and needed to upgrade. Good luck.

Sent from Cisco Technical Support iPad App

Does Cisco NAC support for HP Switches

manjeets — Sat, 17 Aug 2013 10:41:34 GMT

Kindly go through the compatiblity matrix of NAC :

http://www.cisco.com/en/US/products/ps6128/products_device_support_tables_list.html

Does Cisco NAC support for HP Switches

game123 — Mon, 13 Jan 2014 19:05:47 GMT

Well, NAC does not require cisco switches i believe. as per theory you are just supposed to pass on the logic of auth(untrust) vlan to access(trust) vlan and connect your switches in L2 or L3 topology with Cisco CAS (also called NAS) server.

Just as hint :

CAM (also called NAM) will use mostly 1 ethernet port (2nd port you need only for HA if you have 1 more CAM box)

CAS (also called NAS ) will minimum require 2 ports. Both normally will be trunks and pass relevant traffic as per theory of auth and acc vlans.

Hope this helps.

-K-