Cisco Layer 3 Switch Integration Script (Nexus 7000 F2/3 Module)

This document provides scripts required to complete the installation of the NAC Solution

NAC Router Integration Script

conf t

feature pbr

feature netflow

hardware access-list resource pooling module x, x, x (replace x with all module numbers and remove this comment)

hardware access-list resource feature bank-mapping

flow record sc-record match ipv4 protocol

match ipv4 source address

match ipv4 destination address

match transport source-port

match transport destination-port

flow exporter sc-exporter

destination x.x.x.x (replace x.x.x.x with IP of NAC server and remove this comment)

transport udp 50001

source vlan x (replace x with management VLAN and remove this comment)

version 5

flow monitor sc-monitor

exporter sc-exporter

record sc-record

sampler SC-NF-Sampler

mode 1 out-of 100

flow timeout active 60

*Note – Be sure to also allow the NAC Enforcer access to the router if a VTY/SSH access-list is present on the router.

Last updated on

Was this page helpful?