NAC @ Remote Sites

[mohammed.enab]

I have a deployment of NAC Solution where CAM located @ HQ, Users at HQ has a dedicated CAS, while other sites has a seperate CAS/NAC Modular  located at thier sites

the deployment is L3 OOB, in case the CAS at Remote site has failed, is there a way to make them use the CAS located at HQ dynamically?

if it is not possible, can we make the user authenticate without NAC at all??

[Faisal Sehbai]

Mohammed,

Depends on a lot of factors. If you have IB CASs and the traffic can only traverse the CAS to get to your network, you'll have to redirect the flow so it bypasses the CAS. If you have OOB CASs and they fail, you can change the switch configurations to be on the Access VLANs to begin with. Same holds true for IB CASs. If you have NME modules, then you'll have to again make sure the traffic flow is bypassing the CAS.

HTH,

Faisal