NAC Issues

[jliewch2003]

Hi all, may i know that if my NAC goes down is that any impact to my network? And how can i resolve it when NAC goes down? Since user need to authenticate is that anyway to solve it?

Besides, may i know how to generate a SSL certificate when the existing cert had expired.

Thanks and Regards

[Fabio Funaki]

Hi Chong,

If the deployment is inband, if the CAS goes down, then all users go offline. So you will need to have some scripts to users access the network bypassing the CAS.

If the deployment is out of band, you can configure CAS fallback policy,

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/49/cas/s_addSrvr.html#wp1098561

Rgds

Fabio Funaki