topic NAC VLAN Assignment in Network Security

NAC VLAN Assignment

kwillacey — Fri, 21 Feb 2020 10:53:19 GMT

If I had a in band solution for wireless and an out of band solution for wired, would it be possible to assign the same vlan for both in/out of band?

For example if I had an employee group that has access to both wired and wireless if an employee were to log on to either could they be assigned to the same employee vlan?

It sounds like it could be possible but I can't find anything that can tell me it can work. Help please, thanks.

Re: NAC VLAN Assignment

trevora — Tue, 17 Jun 2008 20:34:05 GMT

Theoretically this should be possible however you would need 2 CAS appliances as the CAS can only be either IB or OOB but not both at the same time.

Re: NAC VLAN Assignment

kwillacey — Tue, 17 Jun 2008 20:39:19 GMT

Yes that would be the case, any resources that can help?

Re: NAC VLAN Assignment

trevora — Tue, 17 Jun 2008 20:48:38 GMT

I've not come across any documentation that defines this scenario, but I would just configure 2 CAS's (1xIB & 1xOOB) and follow the config guide for each deployment type.

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/413/cam/413_cam_book.html

Hope this helps.

Re: NAC VLAN Assignment

kwillacey — Wed, 18 Jun 2008 12:36:44 GMT

Thanks for the link but I must admit I have only worked mostly with out-of-band. Are there any guides that focus on in-band?

Any thoughts on issues that may arise from such a configuration?