Login disabled for Nac Agent

[abuzar.siddiqui]

Hi,

After installing the NAC Agent on Windows XP.

The Login window does not pops up.

Please refer the cisco support report attached.

Kindly suggest to overcome this problem.

Thanks,

Abuzar

[Tiago Antunes]

Hi,

The agent is not able t oreach to the discovery host...

...

SwissRunner received ICMP Port Unreachable for Swiss request sent to address 192.168.179.1

...

Please make sure you are allowing port 8905 and 8906 on the default gw and traffic to the CAS ip address as well for the Discovery host.

Also, please make sure you are on the correct vlan.

BTW, what is the setup?

Thanks,
Tiago

--

If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

[abuzar.siddiqui]

Hello Tiago,

Thanx for the reply.

The setup is on VMware.

I have created 3 VM's each for NAC Profiler, CAS and CAM.

Can you please suggest what all settings or steps should I have to do to allow port 8905 and 8906 on the default gateway and traffic to the CAS ip address and as well as for discovery host.

Please suggest on this.

Thanks,

Abuzar

[Tiago Antunes · Accepted solution]

Well, the default gw is a L3 device that you have on your network, and if there is a firewall there you need to open the comunication for those ports.

What is the VLAN configuration on the switch where the client is connected?

Do you have a network diagram?

Cheers,

Tiago