NAC migration from L2 OOB to L3

[wkamil123]

Hello,

I have a question about a migration NAC Appliance 7.0 version in L2 OOB deployment to L3 Real-IP Gateway.

Do I need any other issue to this or I only must change settings on CAM in "Clean Access Server Type"?

I don't have a lab to test it.

Kamil,

[Faisal Sehbai]

Kamil,

Is your L2 OOB deployment Real-IP also? If so, to enable L3, you just have to checkmark the box in the network settings and reboot your CAS. If it's in VGW mode, then a bit more work is required.

HTH,

Faisal

[wkamil123]

Faisal,

This deployment is L2 OOB VG.

The  next question is if I changed server type from L2 OOB VG to L2 OOB  Real-IP in network setings  do I lose some settings in configuration?

What else do I need to do, what you mentioned?

Kamil

[Faisal Sehbai]

Kamil,

You'll have to give different IP address to your untrusted interface for one. Going from VGW to RIP is a major design change, so you'll have to vet your design again to ensure that the NAC traffic flow is working the way you expect it to.

HTH,

Faisal

[wkamil123]

Hi Faisal,

What is the procedure for a NAC in HA?

Kamil

[Faisal Sehbai]

Kamil,

HA and NAC (assuming 4.7.2 version): http://tinyurl.com/yc727jl

HTH,

Faisal

[wkamil123]

Hi Faisal,

It's a small a misunderstanding about NAC in HA and my question it's no asked precise.

So, what is the procedure migrating NAC in HA mode from L2 VGW to L3 RIP?

Kamil,

[Faisal Sehbai]

Kamil,

That would require a major design change in your network -  something I guarantee you is not possible to handle in a forum setting :-)

If you have a Cisco account team, engage them, so they can help you get a workable design for L3 RIP.

HTH,

Faisal