Alcatel-Lucent Layer 3 Integration Script (6850/6900)

This document provides scripts required to complete the installation of the NAC Solution

NAC Router Integration Script

sflow receiver 1 name NAC address x.x.x.x udp-port 50001 packet- size 1400 version 5 timeout 0 (replace x.x.x.x with IP of NAC appliance and remove this comment)

sflow sampler 1 x/x receiver 1 rate 1 sample-hdr-size 128 (Layer 2 interface(s) that user traffic will ingress on, remove this comment)

sflow poller 1 x/x receiver 1 interval 5 (Layer 2 interface(s) that user traffic will ingress on, remove this comment)

ip helper vlan x address x.x.x.x (replace x.x.x.x with IP of NAC appliance and remove this comment)

policy network group intranet x.x.x.x (Replace with IP of AD server and remove this comment)

policy network group intranet x.x.x.x (Replace with IP of AV server and remove this comment)

policy network group impulse_block 1.1.1.1 (placeholder, remove this comment)

policy service svc-dhcp destination udp port 67 policy service svc-dns destination udp port 53

*Note – Be sure to also allow the NAC Enforcer access to the router if a VTY/SSH access-list is present on the router.

Last updated on

Was this page helpful?