Dell S-Series/OS9 Layer 3 Integration Script

This document provides scripts required to complete the installation of the NAC Solution

NAC Router Integration Script

NOTE – This script includes CAM configuration for PBR which requires a switch reload. The reload command is part of the script so the switch will reload when the script is run.

Powershell
    
configure t!cam-acl l2acl 1 ipv4acl 1 ipv6acl 0 ipv4qos 1 l2qos 1 l2pt 0 ipmacacl 0vman-qos 0 ecfmacl 0 ipv4pbr 9!ip redirect-list impulse_block  seq 1 permit udp any any eq 53  seq 2 permit udp any any eq 67 seq 3 redirect x.x.x.x ip any host 198.31.193.211 (replace x.x.x.x with IP of NAC server and remove this comment)!interface vlan X (Layer 3 interface(s) which is/are default gateway for subnet(s) to be placed under policy – recommend a test subnet first, remove this comment)ip redirect-group impulse_blockip helper-address x.x.x.x (replace x.x.x.x with IP of NAC server and remove this comment)!sflow collector x.x.x.x agent-addr y.y.y.y 50001 (replace x.x.x.x with IP of NAC server and and y.y.y.y with switch management IP, remove this comment)sflow enablesflow polling-interval 15sflow sample-rate 256!interface GigabitEthernet X (Layer 2 interface(s) for any layer 3 interface with the redirect-group applied, remove this comment) sflow enablesflow sample-rate 256!end!wr mem!reload
Copy

*Note – Be sure to also allow the NAC Enforcer access to the router if a VTY/SSH access-list is present on the router.

Last updated on

Was this page helpful?

Dell S-Series/OS9 Layer 3 Integration Script

This Website Uses Cookies

Functional Cookies

Performance Cookies

Strictly Necessary Cookies

Targeting Cookies