Adding an additional CAS to an existing NAC OOB deployment 4.7.3

Hi Guys,
If I am to add the Self-generated certificate of my new CAS to my existing CAM's trusted certificate authorities list, will it just be added or will it replace the existing trusted certificate?

Hi Adrian,
The 'trusted certificate authorities' are the certificate of all the root CAs and also the self signed certs of the CASes that the CAM trusts. So every time you add a root/selfsigned cert to this list it gets appended to the list and does not replace any of the certs.This link gives more information on this :
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/45/cas/s_admin.html#wp1092761
Regards,
Som
P.S.: Please mark the question resolved if it has been answered. Do rate helpful posts. Thanks

Similar Messages

Adding an additional site to an existing Server?

I am terribly newb to all this web stuff so please "cut me a
little slack" on this and correct me if my assumptions are wrong. I
have a CF MX 7 instance running on a Win2003, Web Ed. Server that
is hosting website 1. I would like to create and host website #2 on
the same box. It has two NICs and was thinking about associating
each site with one of the NICs. Given the fact that I have already
installed CF on the box and the site is on the NET, how do I go
about the CF end of hosting the 2nd site on this box? Do I simply
install CF a second time, on the same box, but to a different path?
I've read a bunch in the help files about EARs and WARs, multiple
server instances, clustering and all that good stuff, but honestly,
I'm as confused as ever. I swear that these help files and other
support documents just make me more confused. Not just Adobe, but
generally all of them. Secondly, can I do this retroactively, or
would I have needed to make the call when the first instance was
being configured. Thanks in advance for any guidance and/or
enlightenment.

The simplest way to configure a 2nd site is to just create a
virtual website in IIS. Use host headers or whatever method you
like to direct you traffic to this site. You can run wsconfig.exe
to remove CFMX's connector to IIS and then just re-install
selecting all sites. Your single cfmx server will run both sites.
A CFMX multiserver installation can be used. You could create
a cfmx server instance for each website. That way, each site would
be fully independent of the other. Definitely, better but not
absolutely required.
The first option can be done with no re-installation work
needed except dealing with wsconfig to configure cfmx to your
websites. The second would require an uninstall and re-installation
of cfmx using the multiserver installation. You would then use the
first instance of cfmx/enterprise manager to create 2 new server
instances to run you websites.

Adding additional fields to an existing Infoset.

Experts,
I got a requirement to add additional fields to an existing info set which belongs to different Logical Data base.
The existing info set is based on PNPCE LDB and the fields are from PD (i.e PCH ldb).
Please let me know hw to add those fields...
Thanks,
Shrini

Hi Shrini,
You can add fields from PD infotypes (1000-1999) to a PNPCE infoset if the object has a relationship to a Person. Example would be Position which has the relationship Holder. You go to Change the Infoset. Edit --> Change infotype selection. Scroll down to the bottom and open Infotypes of Related Objects. Open Position. There you will see the possible relationships between a Position and Person. Select Holder. There you have the list of infotypes assigned to a Position that you can add by checking each. You can then add whatever fields are in that infotype to the Infoset.
Problem comes in if there is no direct relationship between a Person and the object - such as Job that you want to include in the Infoset. A Job describes a Position and a Person holds a Position, but a Person does not have the direct relationship to the Job except as a Dislike or Successor. In this case you would need to create a new PCH Infoset with the root object Position. Then using the relationships between Position and Job and Position and Person, you can access the infotypes from PA as well as PD.
Paul

Adding Additional Tables to an Existing Query

Dear All
I have the following tables and relationships:
I have the following query that returns records from the table SENAlert where the StudentID and the TeacherUsername are passed in as parameters.
Also, records are only returned if there isn’t a corresponding record in the SENAlertHistory table (i.e. SENAlertHistorySENAlertID IS NULL).
This query is returning the results that I would expect:
SELECT
SENAlert.SENAlertID, SENAlertType.SENAlertTypeDescription
FROM
SENAlertHistory RIGHT OUTER JOIN
Teacher INNER JOIN
Class ON Teacher.TeacherCode = Class.ClassTeacherCode INNER JOIN
ClassMember INNER JOIN
SENAlert INNER JOIN
SENAlertType ON SENAlert.SENAlertType = SENAlertType.SENAlertTypeID INNER JOIN
Student ON SENAlert.SENAlertStudentID = Student.StudentID ON ClassMember.ClassMemberStudentID = Student.StudentID ON
Class.ClassClassCode = ClassMember.ClassMemberClassCode ON SENAlertHistory.SENAlertHistorySENAlertID = SENAlert.SENAlertID AND
SENAlertHistory.SENAlertHistoryTeacherCode = Teacher.TeacherCode
WHERE
(Student.StudentID = 011763) AND (Teacher.TeacherUsername = 'dsmith') AND (SENAlertHistory.SENAlertHistorySENAlertID IS NULL)
However, I need to extend this query to include additional teachers who may also teach this student. I am trying to add in 3 additional copies of
the Teacher table as Teacher_1, Teacher_3 and Teacher _3 in order to include them in the query also.
However, when I add these tables in I no longer get any results returned.
I have managed to do this on other queries but not this one.
SELECT SENAlert.SENAlertID, SENAlertType.SENAlertTypeDescription
FROM SENAlertHistory INNER JOIN
Teacher ON SENAlertHistory.SENAlertHistoryTeacherCode = Teacher.TeacherCode INNER JOIN
Teacher AS Teacher_1 ON SENAlertHistory.SENAlertHistoryTeacherCode = Teacher_1.TeacherCode INNER JOIN
Teacher AS Teacher_2 ON SENAlertHistory.SENAlertHistoryTeacherCode = Teacher_2.TeacherCode INNER JOIN
Teacher AS Teacher_3 ON SENAlertHistory.SENAlertHistoryTeacherCode = Teacher_3.TeacherCode RIGHT OUTER JOIN
Class INNER JOIN
ClassMember INNER JOIN
SENAlert INNER JOIN
SENAlertType ON SENAlert.SENAlertType = SENAlertType.SENAlertTypeID INNER JOIN
Student ON SENAlert.SENAlertStudentID = Student.StudentID ON ClassMember.ClassMemberStudentID = Student.StudentID ON
Class.ClassClassCode = ClassMember.ClassMemberClassCode ON Teacher_3.TeacherCode = Class.ClassTeacherCode AND
Teacher_2.TeacherCode = Class.ClassTeacherCode AND Teacher_1.TeacherCode = Class.ClassTeacherCode AND
Teacher.TeacherCode = Class.ClassTeacherCode AND SENAlertHistory.SENAlertHistorySENAlertID = SENAlert.SENAlertID
WHERE (Student.StudentID = 011763) AND (SENAlertHistory.SENAlertHistorySENAlertID IS NULL)
AND (Teacher.TeacherUsername = 'admin\dsmith' OR Teacher_1.TeacherUsername = 'admin\dsmith' OR Teacher_2.TeacherUsername = 'admin\dsmith' OR Teacher_3.TeacherUsername = 'admin\dsmith')
No results are returned from this adapted query. I have noticed that by adding the additional tables, it keeps changing the type of joins that I
have between certain tables. I have tried all sorts of combinations but haven't been able to make it work.
I would be really grateful for any advice that you may be able to offer.
Many thanks
Daniel

Dear All
I followed the advice and created the query again from scratch, one table and relationship at a time checking that I am getting the expected result. I have put much of the query back together with the correct output:
SELECT
SENAlert.SENAlertID,
SENAlertType.SENAlertTypeDescription
FROM dbo.SENAlert
INNER JOIN dbo.SENAlertType
ON SENAlert.SENAlertType = SENAlertType.SENAlertTypeID
INNER JOIN dbo.Student
ON SENAlert.SENAlertStudentID = Student.StudentID
INNER JOIN dbo.ClassMember
ON ClassMember.ClassMemberStudentID = Student.StudentID
INNER JOIN dbo.Class
ON ClassMember.ClassMemberClassCode = Class.ClassClassCode
INNER JOIN dbo.Teacher
ON Class.ClassTeacherCode = Teacher.TeacherCode
LEFT OUTER JOIN dbo.Teacher AdditionalTeacher1
ON AdditionalTeacher1.TeacherCode = Class.ClassAdditionalTeacherCode1
LEFT OUTER JOIN dbo.Teacher AdditionalTeacher2
ON AdditionalTeacher2.TeacherCode = Class.ClassAdditionalTeacherCode2
LEFT OUTER JOIN dbo.Teacher AdditionalTeacher3
ON AdditionalTeacher3.TeacherCode = Class.ClassAdditionalTeacherCode3
WHERE Student.StudentID = 011763
AND (Teacher.TeacherUsername = 'admin\dsmith'
OR AdditionalTeacher1.TeacherUsername = 'admin\dsmith'
OR AdditionalTeacher2.TeacherUsername = 'admin\dsmith'
OR AdditionalTeacher3.TeacherUsername = 'admin\dsmith')
The problem arises when I try to add the SENAlertHistory table back in. I only want to show results where a related record does not exist in SENAlertHistory. I have tried every combination of relationship but none have been successful.
I think maybe I need to be using a subquery instead.
Thanks for your help
Daniel
do you mean this?
SELECT
SENAlert.SENAlertID,
SENAlertType.SENAlertTypeDescription
FROM dbo.SENAlert
INNER JOIN dbo.SENAlertType
ON SENAlert.SENAlertType = SENAlertType.SENAlertTypeID
INNER JOIN dbo.Student
ON SENAlert.SENAlertStudentID = Student.StudentID
INNER JOIN dbo.ClassMember
ON ClassMember.ClassMemberStudentID = Student.StudentID
INNER JOIN dbo.Class
ON ClassMember.ClassMemberClassCode = Class.ClassClassCode
INNER JOIN dbo.Teacher
ON Class.ClassTeacherCode = Teacher.TeacherCode
AND NOT EXISTS ( SELECT 1
FROM SENAlertHistory
WHERE SENALertHistoryTeacherCode = Teacher.TeacherCode
AND SENAlertHistorySENAlertID = SENAlert.SENAlertID)LEFT OUTER JOIN dbo.Teacher AdditionalTeacher1
ON AdditionalTeacher1.TeacherCode = Class.ClassAdditionalTeacherCode1
AND NOT EXISTS (SELECT 1
FROM SENAlertHistory
WHERE SENAlertHistoryTeacherCode = AdditionalTeacher1.TeacherCode
AND SENAlertHistorySENAlertID = SENAlert.SENAlertID
LEFT OUTER JOIN dbo.Teacher AdditionalTeacher2
ON AdditionalTeacher2.TeacherCode = Class.ClassAdditionalTeacherCode2
AND NOT EXISTS (SELECT 1
FROM SENAlertHistory
WHERE SENAlertHistoryTeacherCode = AdditionalTeacher2.TeacherCode
AND SENAlertHistorySENAlertID = SENAlert.SENAlertID
LEFT OUTER JOIN dbo.Teacher AdditionalTeacher3
ON AdditionalTeacher3.TeacherCode = Class.ClassAdditionalTeacherCode3
AND NOT EXISTS (SELECT 1
FROM SENAlertHistory
WHERE SENAlertHistoryTeacherCode = AdditionalTeacher3.TeacherCode
AND SENAlertHistorySENAlertID = SENAlert.SENAlertID
WHERE Student.StudentID = 011763
AND (Teacher.TeacherUsername = 'admin\dsmith'
OR AdditionalTeacher1.TeacherUsername = 'admin\dsmith'
OR AdditionalTeacher2.TeacherUsername = 'admin\dsmith'
OR AdditionalTeacher3.TeacherUsername = 'admin\dsmith')
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

Commissioning a new CAS server in existing Exchange 2013 org

I have a question about why my Outlook client would connect to a newly Exchange 2013 CAS server although not a lot of configuration has been done on it? Also, the existing CAS servers are configured with a third party load balancer and the new server was
not added to the existing array configuration?
I do understand the connectivity and the integration between the CAS and the MAILBOX servers and I would like to know if there is a maintenance mode of the CAs server that has just been deployed into an existing org and configure all the relevant info before
allowing connections to it? Thanks.
Chris

Hi,
Could you tell us your DNS settings about:
HLB
Autodisover
Outlook Anywhere internal name.
Regards,
Simon Wu
TechNet Community Support

Free addition to an already existing print subscription package?

Can one provide work created with iBooks Author as a FREE ADDITION to an already existing subscription package? No rise in the subscription cost would occur if this were added. This would be a free addition for subscribers to download for free. This would act as a free digital option/addition to the print subscription. Possible? I know you can distribute the iBook Author work for free, but wanted to ask if it could be free inside of an existing subscription pacakge that is not conneted to iTunes or the iBooks store.

Does this apply?
http://support.apple.com/kb/HT5071#3
Can I distribute works created with iBooks Author as part of a product or service that charges a subscription-based fee?
Books created with iBooks Author may not be sold as part of a subscription-based product or service. iBooks Author books must be distributed free of charge or made available for sale via the iBookstore.

In ical I just added new calendars to a pre-existing calendar group, I can make events with these calendars, but not reminders, any suggestions?

in ical I just added new calendars to a pre-existing calendar group, I can make events with these calendars, but not reminders, any suggestions?

Hi,
Lion has changed the way reminders (todos as was) work. They now seem to need to be in a seperate calendar.
In iCal open the File menu and select New Reminder List... and select where to put it.
Best wishes
John M

Adding one additional row to table control of VA01

HI all,
I am working on free goods N:N senario which is not supported by sap standard.
so we have decided to club all the material on the basis of material group and PSTYV = 'tann' in the table control of va01 and at the end of tann we have to display the free goods .The user exit is USEREXIT_MOVE_FIELD_TO_KOMP.
Please help in in adding the additional row in table control of va01 (TCTRL_U_ERF_AUFTRAG).
Even i have gone through all the thread in sdn and tried all the solution but none of the solution is working .
plz quote solutions....
thanks..
Kundal.

The user exit is USEREXIT_MOVE_FIELD_TO_KOMP
Are you adding condition records, or adding free materials to VBAP? If free materials to VBAP, you're in the wrong exit, I think....look for routines that allow you to add to internal table XVBAP in includes named like MV45AFZ*, and remember to set you UPDKZ to 'I'-insert if you're adding new rows.
Not sure what you mean by not supported by SAP standard; SAP does support free goods, via config!
Edited by: BreakPoint on Mar 14, 2011 4:11 PM

Adding New Customer Address to an Existing one

Adding New Customer Address to an Existing one
Hi
We have a lot customers set up in Oracle and they only have a
ship to address and now we would like to add the bill to address
to these customers. Since there are a lot of customers I was
wondering is there is an open interface we can use to that.
Thank you
alpha

Hi Chandu,
1.In Infospoke -> General tab -> DataSouce(here infobject - 0BPARTNER).
2. Destination tab -> choose radio button(DB Table or Flat file).
3. Goto tab infoobjects -> select required fields you want to send from left to right.
4. Give the selection accordingly(here i think PATRNER). But it should be available in your datasouce(Infoobject-0BPARTNER), if you want to give selection on this. I didnt understad what you mean of <b>"hide"</b> in your previous reply. If this is not available in your infoobject(OBPARTNER), How CAN YOU GIVE SELECTION ON THIS attribute...?
5. Try to add this field in Infoobject(0BPARTNER) and populate.
6. Trnasformation tab.
Here you can see Source Structure, Target Structure and Addin implementation.
Source Structure - system will generate according to the field you selected in InfoObjects tab(You cant change it).
Target Structure - You can define your own structure if you want or you can modify the generated structure. By default system generates Target Structure same as Source structure(if you want to add any more fields you can add here, but you have to populate those fields with your own coding in BAdi), Which is Addin implementation.
Srini
Message was edited by: Srini

Trying to extend the WLAN range by adding an additional Airport Extreme second gen with Ethernet as backchannel.

Hi,
I'm trying to extend the coverage of my home WLAN by adding an additional airport express. I want to use Ethernet as the back channel but whatever I do this ends up in a situation where the WLAN dies completely. I have been able to extend the range by using WLAN to WLAN extension but this reduced the bandwidth a lot.
I have an VDSL modem and uses a airport express as access router. with this unit operating by iteself everything works fine.
It is when I add a second airport express (both second gen) that I get in trouble.
Any idea of what goes wrong?

It is best to set up the extra AE to create a wireless network. You should use the same name (SSID) as you did when setting up the first one. Also use the same password and encryption.
Put the network channel selection on automatic or select different channels for both networks.

Consequences of adding and smartform to output type in nace

Dear experts,
I have one doubt . I want to link one smart form to output type EF ie purchase order. When I am saving it system is asking for customizing requests. I am doing this in development system to check the functionality of one smartform. Because we dont have any IDES System to test. Well I want to what are the consequences of adding an smartform to output type in nace. Whether it wil reflect in quality system without transporting the request. After testing can i remove that smartform which is attached to output type EF. Please confirm.

No replies .

When I add a new bookmark, and the (star) Page Bookmarked window appears - is there any way to expand the size of that window so that I can see my entire list of folders when adding a new bookmark to an existing folder?

When I add a new bookmark, and the (star) Page Bookmarked window appears - is there any way to expand the size of that window so that I can see my entire list of folders when adding a new bookmark to an existing folder? The endless scrolling technique is far too tedious when trying to add a new bookmark, because the window is simply too tiny. Is there maybe a plug-in that will let me grab the corner of that window and re-size it? Thanks!

I suggest you install the "Add Bookmark to Here2" extension, then you can expand the the list but you will not see the bookmark itself in the list if that is what you wanted. At the top you have three major folders you can select one of them and scroll up and down. Below that you have your most recently used folders and you can select one of them instead and scroll up and down. You can see the folder the bookmark is in -- they get added to the bottom
If you really want to see the bookmark within the folder the same extension allows you to bring the bookmark to the folder from say the bookmarks sidebar that is why it is named as such. I use it but mainly i use the dialog.
Please continue reading about bookmarks and some related extensions at
* http://kb.mozillazine.org/Sorting_and_rearranging_bookmarks_-_Firefox
* https://addons.mozilla.org/firefox/addon/add-bookmark-here-2/
* http://dmcritchie.mvps.org/firefox/firefox.htm#addbookmarkhere2
* http://dmcritchie.mvps.org/firefox/kws.htm
If you are not using tags at all, you can remove a whole lot of confusion by removing them from the dialog via the extension.

[svn:cairngorm3:] 21063: Adding a reset method to cleanup existing subscribers/ validators when swapping the VO

Revision: 21063
Revision: 21063
Author:   [email protected]
Date:     2011-04-12 12:58:59 -0700 (Tue, 12 Apr 2011)
Log Message:
Adding a reset method to cleanup existing subscribers/validators when swapping the VO
Modified Paths:
    cairngorm3/trunk/libraries/Validation/src/com/adobe/cairngorm/validation/ValidatorGroupSu bscriber.as

Exchange 2013 mailbox added to the CAS array

We are upgrading to Exchange 2013 from Exchange 2010. Following the development guide, we have
installed the first mailbox server in the Exchange 2010 environment which has 3 Exchange 2010 CAS server
in the array. When installing the mailbox role, we did not choose the client access role but after
the installation we can see that the Exchange 2013 Mailbox server is added to the CAS array and yet
we did not choose the client access role. How does this happen, and to proceed ?

I see the same thing in my lab:
Get-ClientAccessArray | FL
RunspaceId        : 16b992b3-270f-4ae1-a3c3-fa9e2ea73d69
ExchangeLegacyDN : /o=Wingtiptoys/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Ou
                    tlook.wingtiptoys.ca
Fqdn              : Outlook.wingtiptoys.ca
Site              : wingtiptoys.ca/Configuration/Sites/Default-First-Site-Name
SiteName          : Default-First-Site-Name
Members           : {EXCH-2010, EXCH-2013}
AdminDisplayName :
ExchangeVersion   : 0.1 (8.0.535.0)
Name              : Outlook.wingtiptoys.ca
DistinguishedName : CN=Outlook.wingtiptoys.ca,CN=Arrays,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administr
                    ative Groups,CN=Wingtiptoys,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=wingtiptoys,DC=ca
Identity          : Outlook.wingtiptoys.ca
Guid              : 27968af1-1624-4ff3-85c8-e38e68183afe
ObjectCategory    : wingtiptoys.ca/Configuration/Schema/ms-Exch-Client-Access-Array-2
ObjectClass       : {top, server, msExchExchangeServer, msExchClientAccessArray}
WhenChanged       : 4/12/2014 12:51:18 PM
WhenCreated       : 4/12/2014 12:51:18 PM
WhenChangedUTC    : 4/12/2014 7:51:18 PM
WhenCreatedUTC    : 4/12/2014 7:51:18 PM
OrganizationId    :
OriginatingServer : DC-1.wingtiptoys.ca
IsValid           : True
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

NAC OOB VIRTUAL GW PROBLEM

Hi,
I am trying to setup a NAC OOB Virtual GW Scenario (attached is the visio schematic of the setup):
Switch: 3550 (ios 12.2(46) adv ip serv)
NAC 4130 appliances: v4.1.6 (also tried v4.5)
Switch Configuration of the trunks to the CAS):
- int f0/23 (connected to CAS e0) -> dot1q trunk with native vlan 999 and allowed vlans 199 (mgt vlan of cas) and 10 (hosts access vlan)
- int f0/21 (connected ro CAS e1) -> dot1q trunk with native vlan 998 and allowed vlans 100 (hosts authentication vlan)
- SVIs on switch: 199, 10, 200 (CAM mgt vlan), 99 (dns, dhcp)
The problem I am facing is that the host once connected to a managed port is able to acquire an ip from the access vlan from the dhcp server but is not redirected to the login page. I tried to follow some hints provided in previous posts but none of them worked for me. I configured the following:
- Login Page
- Configured IP based traffic control on the unautheticated role to permit all traffic (also host based to permit https://192.168.199.1 -> cas' ip with trusted dns my dns server 192.168.99.1)
- Managed subnet with unused ip in access vlan (192.168.10.253) and vlan id that of the auth vlan (100)
- vlan mapping between untrusted vlan 100 and trusted vlan 10
- tried to access a resolvable website by my dns from the host (as per the suggestion from a previous post for someone who was facing the same prob)
- also tried to access the cas' login page from the host with vain, eventhough it is accessible from trusted subnets
Note: I followed the configuration guide of both v4.1.6 and v4.5 and with both versions I was facing the same problem.
I would be very thankful for any hints to help me solve this issue.
Questions: When the host is connected to a managed host (assigned to the managed vlan 100) and it is assigned an ip from the a access vlan 10. Shouldn't I be able to access the managed subnet case I configured ip traffic control policy to permit all traffic from untrusted to trusted? also shouldn't I be able to resolve website's ip with "nslookup x.com" since dns traffic is by default configured and also trusted dns server 192.168.99.1 is configured?
Thanks in advance for any help.

It arised to be that the 3550/3560/3750 are not supported for Central Deployment. The problem is solved.
Cisco Catalyst 3550/3560/3750 and NAC Appliance In-Band Central Deployment
For Cisco Clean Access (NAC Appliance) in In-Band Central Deployment mode, when a Cisco Catalyst 3560/3750 series switch is used as a Layer 3 switch and if both ports of the Clean Access Server (CAS) are connected to the same 3560/3750 switch, the minimum switch IOS code required is Cisco IOS release 12.2(25)SEE.
Because caveat CSCdu27506 is not fixed on the Catalyst 3550 series switch, when the Catalyst 3550 is used as a Layer 3 switch, it cannot be used in NAC Appliance In-Band Central Deployment.
For further details, refer to switch IOS caveat CSCdu27506:
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCdu27506
See also Switch Support for CAS Virtual Gateway/VLAN Mapping (IB and OOB).
Switch Support for CAS Virtual Gateway/VLAN Mapping (IB and OOB)
Table 6 describes Cisco Catalyst switch model support for the Virtual Gateway VLAN Mapping feature of the Clean Access Server for either in-band (IB) or out-of-band deployments (OOB). This table is intended to clarify CAS network deployment options when connecting the CAS in Virtual Gateway (bridge) mode to the switches listed.
Table 6 Switch Support for CAS Virtual Gateway In-Band/OOB VLAN Mapping Feature
Cisco Catalyst Switch Model Virtual Gateway
Central Deployment
(both interfaces into same switch) Edge Deployment
(each interface into different switch)
6000/6500 Yes Yes
4000/4500 Yes Yes
3750/3560 (L3 switch) Yes with 12.2(25) SEE and higher 1
Yes
3550 (L3 switch) No 1
Yes
3750/3560 (L2 switch) Yes Yes
3550 (L2 switch) Yes Yes
2950/2960 Yes Yes
2900XL No 2
Yes
3500XL Yes Yes
28xx NME Yes with 12.2(25) SEE and higher 1
Yes
1 Due to switch caveat CSCdu27506. See Cisco Catalyst 3550/3560/3750 and NAC Appliance In-Band Central Deployment for details.
2 2900 XL does not support removing VLAN 1 from switch trunks.

Adding an additional CAS to an existing NAC OOB deployment 4.7.3

Similar Messages

Maybe you are looking for