[NAC without authentication]

Carlos A. Silva — Mon, 11 Mar 2019 01:15:46 GMT

Dear All:

Quick question.

Can you implement OOB NAC but avoid using authentication. That is:

That is when a user tries to login through a specific port, that user (whoever it may be) is checked against a static port-assigned policy and IF the user (whoever it may be) is validated as being OK, that port will always be assigned to the same VLAN. I'm just trying to see if I can do posture validation without having user credentials on an LDAP server.

Thanks in advance.

[NAC without authentication]

Tarik Admani — Fri, 29 Jul 2011 07:08:39 GMT

Carlos there is a simple way to bypass authentication and just enforce posturing.

However this will not work if your entire deployment requires user authentication. If not, then this is how you would accomplish this.

You will create device filter for all mac address and select the role type as check, reference material is found here:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_addSrv.html#wp1052361

Then you will create a port profile and follow step 9 here:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_oob.html#wp1083087

I wanted to know more about your deployment, please keep in mind that the filter behavior does change depending on the deployment:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_addSrv.html#wp1142120

Thanks,

Tarik

topic [NAC without authentication] in Network Access Control

[NAC without authentication]

[NAC without authentication]