NAC mac address exclusion

[suthomas1]

Experts, assuming few users are now authenticating & accessing network viz cisco NAC , if  they were to be filtered from NAC so to exclude  them from NAC posturing, will they be disconnected from network & reconnected since they were connected & now will be bypassing NAC.

how does it work in such case. will users be disconnected for this to be effective or will they need to be forcibly unplugged for it to take effect.

thank you all.

[Farrukh Haroon · Accepted solution]

Hello

There is a port bouncing feature in Cisco NAC that does this for you. However this depends on your deployment mode, it is not required for all of them. Please see this link:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_oob.html

Please rate if you find the input helpul; Thanks

Farrukh