NAC, L3, IB and filter on MAC

Hi!
I have a NAC L3 IB deployment and would like to be able to have a filter based on a host's MAC address to assign them to a role, no authentication...
A router separates the host and the CAS.
If I have the agent installed on the client, it should transmit the MAC/IP combo to the CAS. On the CAS, will it match based on the MAC sent by the agent and place it into the proper role? It would then need to put all packets from that IP into that role, since the MAC transmitted with the packet is the router's.
Any insight appreciated.

This error indicates a communication issue between the Agent and the CAS. The Agent pops up initially indicating that the Agent is able to reach the CAS and vice versa. However, at some point the communication is lost resulting in the error message. This error can reflect a timing issue after the VLAN has been changed for the user machine in OOB deployments. Increasing the VLAN Change Delay (under Switch Management > Profiles > SNMP Receiver > Advanced Settings) from the 2 second default to 3 or 4 seconds may resolve the issue.

Similar Messages

  • Mac Address and Filter and Broadcast

    i have an Airport Extreme and want to:
    1 - Do not broadcast the wireless router name;
    2 - Filter by Mac Address the access to my wireless network;
    Thank You,
    Paulo.

    Welcome to the discussion area, PauloGuedes!
    1 - Do not broadcast the wireless router name;
    Open AirPort Utility - Click Manual Setup
    Click the Wireless tab below the row of icons
    Click Wireless Network Options
    Enter a check mark next to "Create a closed network"
    Click Done, then click Update
    2 - Filter by Mac Address the access to my wireless network;
    Open AirPort Utility - Click Manual Setup
    Click the Access Control tab
    MAC Access Control = Timed Access
    Click the + (plus) button at the bottom of the Access Control list to add the MAC address of each device that you want to allow to connect
    Click Update
    For more information, click on the Help menu at the top of the screen and enter the following in the search box: +Controlling access to your wireless network+. You can also reference pages 47-48 in the Apple AirPort Networks Guide.

  • NAC 4.7.2 (OOB VGW)) MAC certificate validation slow

    We have been seeing some odd behavior with certificate validation with MAC OSx device running the installed agent.
    When a user enters their userid and password  they sometimes will get a SSL cert error. If the user clicks on login multiple times they will eventually certify and join the trusted network.
    I did a packet capture of a machine that was experiencing the problem.
    The packet capture showed the MAC making a DNS query for the Verisign server's IP address and the DNS server returns the correct answer. The expected connection to the Verisign server never occurs. (The ssl cert error on the MAC shows up about now.)
    If login is clicked (several times) and you go through the cycle again eventually the connection to the Verisign server is established the certificate is validated and user is placed into the trusted vlan.
    Has anybody else experienced this? Any ideas?

    Faisal,
    I reviewed my work including where I performed my captures. The capture I did initially was between the CAS and the outside world - our routing core.
    I decided to span a port a MAC was connected to and performed another capture.
    Lo and behold the MAC was actually trying to connect to the Verisign server based on IP address of the forward DNS lookup send originally from the MAC.
    I thought about the process and I believe that NAC has to do a reverse lookup on the IP address so that it can compare the server name against host filter I built to allow the traffic.
    The filter was based on the forward lookup so it was something like "ends with crl.verisign.com"
    When I did a reverse lookup I discovered most of the servers returned something like "crl.indv10.verisign.com" which of course did not match the filter I had created. Traffic blocked.
    I changed the filter to just "ends with verisign.com" and it worked 95% of the time.
    Why only 95%?
    One of the servers had an IP address that was outside the 199.x.x.172 pattern most of them use and it did not return a name when the reverse lookup occurred. I finally ended up adding that as IP address as a filter.
    No problems now.
    Later!
    Bob

  • Bridge CC is asking my to 'purge cache'. When I do this doesn't work and freezes my mac. Bridge is unable to work at all. Please help?

    When I start up Bridge CC I get a error message instructing me to purge cache in preferences which I do but it doesn't work and freezes my mac. I cannot curretnly use Bridge CC. PLease help as this is costing me time and money - thank you in advance....

    Hold down the Option key as you launch Bridge, keep it down until you see a dialog box, then click all three options in the re-set box that comes up.
    If you don't see that re-set box, you're doing it wrong, i.e., you're not holding the Option key down fast enough.

  • How do you get Voice Memos off the iPhone and onto my Mac???

    Is this yet another iPhone dead end??
    I used the Voice Memo app that comes with the iPhone to record some rehearsals and now I want to move them to my Mac, edit them, make CDs, share online.
    I can't find any way to get them off the iPhone, unless I click the "Share" button, which means I can email them. But, it won't let me email the longer ones. I don't know how large the files are, but it just won't do it. I don't see any other facility for moving these files to my Mac. What is up with that???? iTunes provides no access to these files.
    Is there some proprietary utility for the Mac that will allow me to access these files and move them to my Mac??? It would be nice if the iPhone would show up as a mounted volume which I could then browse for files, but that would make too much sense and be contrary to the control freak nature of Apple and it's iPhones/iPod Touches. I would call it another lousy user experience, but it's just a user non-experience, a complete dead end.
    Is there any way to get these Voice Memo files off of the iPhone besides emailing them??

    Thank you for replying!
    That kb article refers to the iPod Nano and not the iPhone nor the iPod Touch.
    The Synchronizing section you pointed to does not work. I have a big bunch of voice memos on the iPhone. I tried the sync. Three of them were moved to the Mac, the rest were ignored. Four others were moved to iTunes Music/Music/Unknown with numbered names (i had given several of the voice memos names with the Custom label on the iPhone). For the synch I selected "Include voice memos."
    After a sync, or several syncs, none of the other voice memos were moved to the Voice Memo playlist, nor are they in the iTunes Music library.
    How do you get them to sync? I need to move them off of the iPhone and onto my Mac!

  • How do I install Yosemite on a 2nd HDD I have added and have the Mac Pro boot from the new HDD?

    My MacPro's HD seems to be failing. None of the tests I run indicate that, but I get constant spinning balls and everything takes a long time. I bought a 2nd HDD and installed it in the 2nd bayou my Early 2009 Mac Pro. I formatted it and want to install Yosemite and have the Mac boot off the new drive. It is currently running OS X 10.9.5. When I go to update to Yosemite it begins to download. Will it give me the option of which drive to install on? Or will it just upgrade the original Mac's HD?

    A Samsung 850 EVO 128GB SSD $75 now and makes a huge improvement. But get the 250GB which is $99. 500GB $199
    Wish you asked us first   Awesome prices and performance.
    Output from Etrecheck is an easy "quick check" of what your system is carrying around and what baggage it has.
    Move data to a 'data and media library" drive.
    Use CCC to skip the user data folders except ~/Library and clone to SSD
    And might want to save the installer .ESD package for use as clean installer and to be able to boot from.

  • Problem with 'sort and filter' feature of embed codes in Excel Online Web App

    So my question has to do with the Excel Online feature where you can share a spreadsheet and embed it in a website with the option of allowing users to sort and filter the data. (The option is under the "Interaction" heading.)
    One of the options if you look closely is "Let people sort and filter" which is not checked off. In the embed code you can see "AllowInteractivity=False". The problem is that when I check "Let people sort and filter"
    the embed code changes completely - going from:
    <iframe width="700" height="900" frameborder="0" scrolling="no" src="https://onedrive.live.com/embed?cid=dontworryaboutitEDFD383&resid=6BAA9620AEDFD383%21107&authkey=AFj3X8xq2U3IfDE&em=2&wdAllowInteractivity=False&Item='Sheet1'!A1%3AI32"></iframe>
    to:
    <iframe width="700" height="900" frameborder="0" scrolling="no" src="https://onedrive.live.com/embed?cid=dontworryaboutitEDFD383&resid=6BAA9620AEDFD383%21107&authkey=AFj3X8xq2U3IfDE&em=2&Item='Sheet1'!A1%3AI32"></iframe>
    If I manually change 'false' to 'true' that doesn't do the trick so I'm not sure what to try next.
    Any thoughts?

    Hi,
    We support Office for Windows in the current forum, since this question is about Office Online, I suggest you post the question in Office Online forum:
    http://community.office365.com/en-us/f/default.aspx
    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
    George Zhao
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.

  • Unable to run XPSDrv Driver and Filter Sample

    Hello
    I'm facing to a problem with XPSDrv Driver and Filter Sample on my Windows 7 x64 machine
    I installed Visual Studio Ultimate 2013
    I installed WDK 8.1
    I installed WDK 8.1 Test Pack
    I installed everything from this
    site and I think that's all what I need for building the sample.
    Next I downloaded XPSDrv Driver and Filter Sample from
    http://code.msdn.microsoft.com/windowshardware/XPSDrv-Driver-and-Filter-980d24bc (btw. there is a step-by-step tutorial how to build the sample)
    1. Open the solution file in Visual Studio 2013 (I opened solution C++\XPSDrvSmpl.sln)
    2. Add all non-binary files (usually located in the \install directory of the sample) to the Package project
         a. In the Solution Explorer, right click
    Driver Files (HERE IS THE PROBLEM, WHAT IS DRIVER FILES ??? SEE PICTURE BELOW)
         b. Select Add, then click Existing Item
         c. Navigate to the location to which you downloaded the sample, and select all the files in the install directory, or the equivalent set of non-binary files such as INFs, INIs, GPD, PPD files, etc.
         d. Click Add
    Look at the picture how does my solution look like:
    Can anybody tell me what I'm doing wrong?
    Please remember to mark the replies as answers if they help and unmark them if they provide no help.

    So after I add the InstallPackage, I added all the files in the install folder to the driver files. Than I added all the files of the install folder to the package files in the properties of the driver package. I also added all the dlls of the sample to
    the package files. Then I edited the inf file:
    Change DriverVer to a new date,because the old one is not working.
    And this under the driverver:
    CatalogFile=xdsmpl.cat
    Add this to each Microsoft.xx sections: {GUID}
    Should look like this:
    [Microsoft.NTx86]
    "XPSDrv Sample Driver" = INSTALL_XDSMPL_FILTERS_PRE_VISTA,{GUID}
    [Microsoft.NTia64]
    "XPSDrv Sample Driver" = INSTALL_XDSMPL_FILTERS_PRE_VISTA,{GUID}
    Change the location of the dlls under SourceDisksFiles to 1 or leave it to 2 if you have subfolders for architecures.
    So my inf looks like that:
    ; Copyright (c) 2005 Microsoft Corporation
    ; All rights reserved.
    ; THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
    ; ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO
    ; THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A
    ; PARTICULAR PURPOSE.
    ; File Name:
    ; xdsmpl.inf
    ; Abstract:
    ; XPSDrv sample driver install file
    [Version]
    Signature="$Windows NT$"
    Provider=%MS%
    ClassGUID={4D36E979-E325-11CE-BFC1-08002BE10318}
    Class=Printer
    DriverVer=09/19/2013,6.0.1.0
    CatalogFile=xdsmpl.cat
    [Manufacturer]
    %Microsoft%=Microsoft,NTx86,NTia64,NTamd64,NTx86.6.0,NTia64.6.0,NTamd64.6.0
    [Microsoft.NTx86]
    "XPSDrv Sample Driver" = INSTALL_XDSMPL_FILTERS_PRE_VISTA,{GUID}
    [Microsoft.NTia64]
    "XPSDrv Sample Driver" = INSTALL_XDSMPL_FILTERS_PRE_VISTA,{GUID}
    [Microsoft.NTamd64]
    "XPSDrv Sample Driver" = INSTALL_XDSMPL_FILTERS_PRE_VISTA,{GUID}
    [Microsoft.NTx86.6.0]
    "XPSDrv Sample Driver" = INSTALL_XDSMPL_FILTERS_VISTA,{GUID}
    [Microsoft.NTia64.6.0]
    "XPSDrv Sample Driver" = INSTALL_XDSMPL_FILTERS_VISTA,{GUID}
    [Microsoft.NTamd64.6.0]
    "XPSDrv Sample Driver" = INSTALL_XDSMPL_FILTERS_VISTA,{GUID}
    [INSTALL_XDSMPL_FILTERS_PRE_VISTA]
    CopyFiles=XPSDrvSample,ConfigPlugin,COLORPROFILES
    DriverFile=mxdwdrv.dll
    PrintProcessor="MS_XPS,filterpipelineprintproc.dll"
    ConfigFile=UniDrvUI.dll
    HelpFile=UniDrv.HLP
    DataFile=XDSmpl.GPD
    Include=NTPRINT.INF, MSXPSDRV.INF
    Needs=UNIDRV.OEM, XPSGPD.OEM, XPSDRV.OEM
    [INSTALL_XDSMPL_FILTERS_VISTA]
    CopyFiles=XPSDrvSample,ConfigPlugin,COLORPROFILES
    DriverFile=mxdwdrv.dll
    ConfigFile=UniDrvUI.dll
    HelpFile=UniDrv.HLP
    DataFile=XDSmpl.GPD
    ICMProfiles=xdwscRGB.icc
    CoreDriverSections="{D20EA372-DD35-4950-9ED8-A6335AFE79F0},UNIDRV.OEM", "{D20EA372-DD35-4950-9ED8-A6335AFE79F5},XPSDRV.OEM,XPSGPD.OEM"
    [PrinterPackageInstallation.x86]
    PackageAware=TRUE
    CoreDriverDependencies={D20EA372-DD35-4950-9ED8-A6335AFE79F0}, {D20EA372-DD35-4950-9ED8-A6335AFE79F5}
    [PrinterPackageInstallation.amd64]
    PackageAware=TRUE
    CoreDriverDependencies={D20EA372-DD35-4950-9ED8-A6335AFE79F0}, {D20EA372-DD35-4950-9ED8-A6335AFE79F5}
    [PrinterPackageInstallation.ia64]
    PackageAware=TRUE
    CoreDriverDependencies={D20EA372-DD35-4950-9ED8-A6335AFE79F0}, {D20EA372-DD35-4950-9ED8-A6335AFE79F5}
    [DestinationDirs]
    DefaultDestDir=66000
    COLORPROFILES=66003
    [COLORPROFILES]
    xdwscRGB.icc
    xdCMYKPrinter.icc
    [ConfigPlugin]
    XDSmpl.ini
    XDSmplUI.dll
    [XPSDrvSample]
    xdsmpl.gpd
    xdnames.gpd
    xdwmark.gpd
    xdbook.gpd
    xdcolman.gpd
    xdnup.gpd
    xdpgscl.gpd
    xdwmark.dll
    xdcolman.dll
    xdbook.dll
    xdnup.dll
    xdscale.dll
    xdsmpl-pipelineconfig.xml
    [SourceDisksNames.x86]
    1 = %Location%,,
    2 = %Location%,,,x86
    [SourceDisksNames.ia64]
    1 = %Location%,,
    2 = %Location%,,,ia64
    [SourceDisksNames.amd64]
    1 = %Location%,,
    2 = %Location%,,,amd64
    [SourceDisksFiles]
    xdsmpl.gpd = 1
    xdnames.gpd = 1
    xdwmark.gpd = 1
    xdbook.gpd = 1
    xdcolman.gpd = 1
    xdnup.gpd = 1
    xdpgscl.gpd = 1
    xdsmpl-pipelineconfig.xml = 1
    xdsmpl.ini = 1
    xdwscRGB.icc = 1
    xdCMYKPrinter.icc = 1
    xdwmark.dll = 1
    xdcolman.dll = 1
    xdbook.dll = 1
    xdnup.dll = 1
    xdsmplui.dll = 1
    xdscale.dll = 1
    [Strings]
    Location="XPSDrv Sample Driver Location"
    MS="Microsoft"
    Microsoft="Microsoft"

  • My CD/DVD drive reads regular CDs/DVDs but installation DVDs such as iWork's and office for Mac it spits it out after trying to read it. Please help!!!

    For some reason when I insert installation discs for programs like iWork's and office for Mac the drive does not read the disc. I tried movies and music and they worked perfectly. I was able to fix the problem with the iWork's disc by creating a disc image in another drive, I have yet to do this with the Office for Mac but I would like to know what could be the reason for this problem. Any help is appreciated.

    @ RabidPineappler and Froggiefo20...
    I forgot that I have an extended AppleCare Protection Plan, I contacted Apple today (in Sydney) and they took me through step by step. I tried inserting my OS X disc and it accepted it, I tried putting in a commercial DVD (Star Wars) and it started playing. I then tried putting in a commercial CD and it wouldn't work through iTunes. It made incredibly sick whirring noises and then eventually (approx 5 minutes later) appearred on my desktop, but iTunes7 would not recognise the disc.
    Then he suggested I log in under another username which I did... Then my drive prompty died. It does not accept any disc now. He said that I need to have my iBook seen to by a technician. Since I have the extended warranty, my repair shouldn't cost me anything (the extended warranty was ovver $400, so it better not cost anything), so I can't give you an indication as to what you will be up for.
    You do not need o take your iBook to the place where you bought it, but ensure you have your sales receipt.
    Hope I helped.
    Clairbear

  • I recently purchased a new mac computer and would like to sync the music off my iPhone to my new mac.However, my phone and my new mac have different apple Ids.The PC which my phone is synced and has the same apple ID but does not let me transfer the music

    Hi I recently purchased a new mac computer and would like to sync the music off my iPhone to my new mac.However, my phone and my new mac have different apple Ids.The PC which my phone is synced and has the same apple ID but does not let me transfer the music. Home sharing is not working. How do I successfully transfer and sync the music off my ipone 4 to my mac book pro if they have different Apple IDs? Thanks!

    What do you mean the PC won't let you transfer the music? Save your entire iTunes folder (this is assuming that you have all your music stored in your iTunes folder) to an external hard drive. Connect that hard drive to your Mac. Copy the iTunes folder to your computer. Hold down the option key while launching iTunes on your Mac. Select the library you just copied when it ask you to select which library you want to open.

  • Is it possible to virtually bypass the battery on a macbook pro (retina 2014) and power the mac directly via AC power?

    Is it possible to virtually bypass the battery on a macbook pro (retina 2014) and power the mac directly via AC power?
    E.g. Dell allows you to plug the laptop into AC power but prevent battery charging.
    Note: I do not want to physically remove the battery.
    If there isn't an option on Mac OS, is there anything I can download to bypass the battery when I want?

    Thanks for linking me! Wow I had no idea the clock speed would be cut so severely! What a bunch of rubbish, as if the AC won't provide enough power!
    I guess the only solution to my question would be an app which virtually disconnects the battery but tricks the mac into thinking the battery is still connected. I'm just surprised Apple haven't yet started to build prisons for the government - considering how well they lock up their software and hardware!

  • I have a 17" Mac Book Pro and a 13" Mac Book Pro...both use the same Apple ID. My wife now wants to change the Apple ID on the 13" to her Apple ID.  How do I do this and not loose the information on that computer?

    I have a 17" Mac Book Pro and a 13" Mac Book Pro...both use the same Apple ID. My wife uses the 13" and now wants to change the Apple ID on the 13" to her Apple ID.  How do I do this and not loose the information on that computer?

    Hello Teddy53149 and welcome to Apple Support Communities,
    Follow this procedure:
    Change your OS X account name and home directory name - Apple Support
    As they recommend and as always when you're messing with administrator accounts back everything up first.

  • Can i connect my iMac to a mac mini (wirelessly) and control the mac mini display on my TV?

    Can i connect my iMac to a mac mini (wirelessly) and control the mac mini display on my TV?

    Look up "screen sharing" in help
    You can control your mini (which I am assuming you are hooking to your TV) complete from your iMac.
    After you set up screen sharing, you can go to the finder, under the "go" menu choose "Connect to server" and then browse.  Choose your mac mini's name, and look for the "Screen Sharing" button.
    Choose Apple menu > System Preferences, and then click Sharing.
    Select the Screen Sharing checkbox.
    To specify who can share your screen, select one of the following:
    All users:
    Select this if you want to allow any user with a user account on your computer to share your screen.
    Only these users:
    Select this if you want to restrict screen sharing to specific users.Click Add at the bottom of the Users list and select a user from Users & Groups (accounts you have set up in Users & Groups preferences), Network Users (users on your network), or your Address Book. Or click New Person and enter a name and password to create a sharing account. Then select that user from the list, and then click Select.
    Click Computer Settings and set the following options:
    Anyone may request permission to control screen:
    Select this to allow anyone on your network to request to share your screen.
    VNC viewers may control screen with password:
    Select this and enter a password that VNC viewer applications can enter in order to control your screen.It’s recommended that you not set a password if you only share this computer’s screen using the built-in screen sharing viewer in Mac OS X.

  • I just purchased a MacBookPro after having a MacBook.  I have ILife, IWorks and Office for Mac.  How do I get those programs on to my MacBook Pro?  I will still use my MacBook at work so I need those programs to remain on it as well.

    I just purchased a MacBookPro after having a MacBook.  I have ILife, IWorks and Office for Mac.  How do I get those programs on to my MacBook Pro?  I will still use my MacBook at work so I need those programs to remain on it as well.

    You need a Firewire cable to run between the two Macs.  Using Utility>Migration Assistant running on your new MacBook Pro, transfer what you want (with all the preferences and such) from your MacBook to your MBP.  Here's more info from Apple.
    You might have an issue with the Serial number for Office, but hopefully you have that around.
    Hope this helps.

  • I have a new mac and my old mac had my photos on it how can I get my photos onto iPhoto without using a external drive or flash drive?

    My dad put a new mac in and the old Mac had my photos on it, and I checked iPhoto after it the new computer was plugged in and there was no photos in it, and my dad said that they should be in there but they aren't, so is there a way to get my photos onto the new Mac without the old one and without an external or flash drive? Because a lot of my photos I don't have on my camera because the memory card was full and the pictures that I had already had been on the old mac....
    Thanks!

    Have your dad post de what happened - you need to be at least 13 o se these forums and we need to be able to understand what you are asking
    the basic answer to moving photos is Connect the two Macs together (network, firewire target mode, etc)  or use an external hard drive formatted Mac OS extended (journaled) and drag the iPhoto library intact as a single entity from the old Mac to the pictures folder of the new Mac - launch iPhoto on the new mac and it will open the library and convert it as needed and you will be ready move forward.  but you say you do not have the old computer
    Unless  you have a backup or there is more information the answer is there s no way now
    LN

Maybe you are looking for

  • Accessing a field in nested internal table

    Hi, Could you please help me how to get value in nested structure 'COMT_PRODUCT_IL_API'. We need to access field 'DESTINGUID' in that nested structure. Thanks, Santosh

  • Paint() method in an entity class

    Hi, I am trying to draw 2 shapes in a Canvas, one rectangle and a circle. However, I have an entity class for both the rectangle and the circle, something like: public class MyRectangle private int width, height; public MyRectangle() { ... } pulbic g

  • Problem to output image using ServletOutputStream

    Hallo everybody! Can anybody help me? I try to output image (jpeg) using ServletOutputStream. First I upload jpeg image to server disassemble it to binary data and save to database binary data, image length, and image type. Then I try to output image

  • Yet another netgear problem!

    there was a lightning strike recently at my house and the internet stopped working for a PC and my mac that were connected to the cable modem. the PC laptop, not plugged in at the time, still worked when plugged directly into the modem. we replaced o

  • Sccm Client policy not downloading in 2012 clients

    http://social.technet.microsoft.com/Forums/getfile/325967 http://social.technet.microsoft.com/Forums/getfile/325971 While delete the Smscfg.ini heartbeat will come but Policy not downloading in clients IN some Client not download policy and only has