Installation
nac_v8.2.0
Search this version
Installation
Installation
Title
Message
Create new category
What is the title of your new category?
Edit page index title
What is the title of the page index?
Edit category
What is the new title of your category?
Edit link
What is the new title and URL of your link?
Alcatel-Lucent Layer 3 Integration Script (9700)
Copy Markdown
Open in ChatGPT
Open in Claude
This document provides scripts required to complete the installation of the NAC Solution
NAC Router Integration Script
Powershell
x
sflow receiver 1 name NAC address x.x.x.x udp-port 50001 packet- size 1400 version 5 timeout 0 (replace x.x.x.x with IP of NAC appliance and remove this comment)sflow sampler 1 x/x receiver 1 rate 1 sample-hdr-size 128 (Layer 2 interface(s) that user traffic will ingress on, remove this comment)sflow poller 1 x/x receiver 1 interval 5 (Layer 2 interface(s) that user traffic will ingress on, remove this comment)ip helper vlan x address x.x.x.x (replace x.x.x.x with IP of NAC appliance and remove this comment)policy network group intranet x.x.x.x (Replace with IP of AD server and remove this comment)policy network group intranet x.x.x.x (Replace with IP of AV server and remove this comment)policy network group impulse_block 1.1.1.1 (placeholder, remove this comment)policy service svc-dhcp destination udp port 67 policy service svc-dns destination udp port 53policy service group protocolallow svc-dhcp svc-dnspolicy condition to-protocolallow service group protocolallow policy condition to-intranet destination network group intranetpolicy condition to-enforcer destination ip 198.31.193.211 vrf defaultpolicy condition noncompliant source network group impulse_block vrf defaultpolicy rule intranet-rule precedence 150 condition to-intranet action AllowTrafficpolicy rule protocol-rule precedence 140 condition to-protocolallow action allowprotocolpolicy rule enforcer-rule precedence 130 condition to-enforcer action next-hop-enforcerpolicy rule block precedence 120 condition noncompliant action next-hop- enforcerpolicy action AllowTraffic policy action allowprotocolpolicy action next-hop-enforcer permanent gateway ip x.x.x.x (replace x.x.x.x with IP of NAC appliance and remove this comment)qos apply*Note – Be sure to also allow the NAC Enforcer access to the router if a VTY/SSH access-list is present on the router.
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
Last updated on
Was this page helpful?
Next to read:
Brocade/Ruckus/Arris Layer 3 Integration Script (ICX)Discard Changes
Do you want to discard your current changes and overwrite with the template?
Archive Synced Block
Message
Create new Template
What is this template's title?
Delete Template
Message
