The NAC Controller Policy Configuration
See Figure 6‐24 to help visualize how you would determine the NAC Controller mode of operation. Starting at the end‐user and moving up stream, the position of the first NAC Controller is downstream of the first router in its path. This NAC Controller functions in L2 operations mode. Continuing to move upstream past the router, the next NAC Controller is upstream of the first router in its path. This NAC Controller functions in L3 operations mode.
Figure 6-24 Determining NAC Controller Mode of Operation
NAC Controllers of the same mode of operation must by assigned to their own unique policy domain. For example, you can have multiple L2 NAC Controllers in one domain and multiple L3 NAC Controllers in another domain, but you canʹt combine L2 and L3 NAC Controllers in the same domain.
Note: NAC Controllers can not share the same policy domain with any other
Because the two NAC Controllers shown in Figure 6‐24 are of different operational modes, they must each belong to a separate policy domain from each other as well as any other switch in the network.
Assure that all NAC Controllers of the same operational mode are in a policy domain not shared with any NAC Controller of a different operational mode or any non‐NAC Controller switch type.
Enterasys NAC Controller Hardware Installation Guide