Installation
nac_v8.2.0
Search this version
Installation
Installation
Title
Message
Create new category
What is the title of your new category?
Edit page index title
What is the title of the page index?
Edit category
What is the new title of your category?
Edit link
What is the new title and URL of your link?
Alcatel OmniSwitch 2 Switch Integration Script
Copy Markdown
Open in ChatGPT
Open in Claude
Note: This integration was certified on an OS6465-P28 running 8.6.289.R01 and an OS6865-P16X running 8.6.289.R01. Replace x.x.x.x with the NAC appliance IP and replace “your-shared-secret-here” with the shared secret you would like to use, this will also need to be added in the NAC RADIUS UI.
unp profile "SC_Guest_Profile" qos-policy-list "SC_Guest_List"
unp profile "SC_Initial_Profile"
unp profile "SC_Compliant_Profile"
unp profile "SC_Quarantine_Profile" qos-policy-list "SC_Quarantine_List"
unp profile "SC_Guest_Profile" map vlan 18
unp profile "SC_Initial_Profile" map vlan 18
unp profile "SC_Compliant_Profile" map vlan 18
unp profile "SC_Quarantine_Profile" map vlan 18
unp redirect pause-timer 60
unp redirect server 10.101.150.10
unp port 1/1/1 port-type bridge
unp port 1/1/1 redirect-port-bounce direction both default-profile "SC_Initial_Profile"
classification trust-tag ap-mode dynamic-service none
unp port 1/1/1 admin-state enable
unp port 1/1/1 802.1x-authentication
unp port 1/1/1 mac-authentication
!
aaa radius-server "NAC" host x.x.x.x hash-key your-shared-secret-here retransmit 3
timeout 2 auth-port 1812 acct-port 1813 vrf-name default
!
aaa device-authentication mac "NAC"
aaa device-authentication 802.1x "NAC"
aaa accounting mac "NAC"
aaa accounting 802.1x "NAC"
!
policy service svc-dhcp destination udp-port 67
policy service svc-dns destination udp-port 53
policy service group protocolallow svc-dns svc-dhcp
policy network group NAC x.x.x.x 198.31.193.211
policy network group internal 10.0.0.0 mask 255.0.0.0 172.16.0.0 mask 255.240.0.0
192.168.0.0 mask 255.255.0.0
policy condition to-protocolallow service group protocolallow
policy condition to-internal destination network group internal
policy condition to-NAC destination network group NAC
policy action ACCEPT
policy action DENY disposition deny
policy rule Allow-NAC precedence 1002 condition to-NAC action ACCEPT no
default-list
policy rule Allow-Services precedence 1002 condition to-protocolallow action ACCEPT no
default-list
policy rule Deny-Internal precedence 1000 condition to-internal action DENY no default-list
policy list SC_Quarantine_List type unp
policy list SC_Quarantine_List rules Deny-Internal Allow-NAC Allow-Services
policy list SC_Guest_List type unp
policy list SC_Guest_List rules Deny-Internal Allow-Services
qos apply
!
!
mvrp enable
!
wr mem flash-synchro
Last updated on
Was this page helpful?
Next to read:
Cisco Wired Layer 2 Integration (2960X/XR)null
Discard Changes
Do you want to discard your current changes and overwrite with the template?
Archive Synced Block
Message
Create new Template
What is this template's title?
Delete Template
Message