Chapter22 Network Admission Con trol
Create NAC Tab
22-30
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08

Details Window

This window displays the entries that SDM will add to ACLs to allow services
needed for the NAC validation process. The window might contain an entry like
the following:
permit tcp host 10.77.158.84 eq www host 10.77.158.84 gt 1024
Summary of the configuration
This window summarizes the information you entered, and allows you to review
it in a single window. You can use the back button to return to any wizard screen
to change information. Click Finish to deliver the configuration to the router.
Here is an example of a NAC configuration summary:
RADIUS Source Interface: Ethernet 0/0
RADIUS Server(s):
10.77.158.54
Interface: FastEthernet 0/0
Admission Name: SDM_ADM_Policy_1
Exception List
In this example, RADIUS information from 10.77.158.54 en ters via Ethernet 0/0.
NAC is enabled on FastEthernet 0/0, and the NAC policy that the wizard applied
is SDM_ADM_Policy_1. Two hosts have been named in the exception list, and
their access to the network is controlled by the exception policy NACLess.
FastEthernet0/0 NTP 101 (INBOUND) [ ] Modify
FastEthernet0/0 RADIUS Server [ ] Modify
Interface Service ACL Action
Type Address/Device Policy
IP Address 10.10.10.1 NACLess
IP Address 10.10.10.1 NACLess