The NAC Controller Policy Configuration
Enterasys NAC Controller Hardware Installation Guide 6-17
SeeFigure 624tohelpvisualizehowyouwoulddeterminetheNAC Controllermodeof
operation.Startingattheenduserandmovingupstream,thepositionofthefirstNAC Controller
isdownstreamofthefirstrouterinitspath.ThisNAC ControllerfunctionsinL2operations
mode.Continuingtomoveupstreampasttherouter,thenextNAC Controllerisupstreamofthe
firstrouterinitspath.ThisNAC ControllerfunctionsinL3operationsmode.
Figure 6-24 Determining NAC Controller Mode of Operation
NACControllersofthesamemodeofoperationmustbyassignedtotheirownuniquepolicy
domain.Forexample,youcanhavemultipleL2NACControllersinonedomainandmultipleL3
NACControllersinanotherdomain,butyoucanʹtcombineL2andL3NACControllersinthe
samedomain.
BecausethetwoNAC ControllersshowninFigure 624areofdifferentoperationalmodes,they
musteachbelongtoaseparatepolicydomainfromeachotheraswellasanyotherswitchinthe
network.
AssurethatallNAC Controllersofthesameoperationalmodeareinapolicydomainnotshared
withanyNAC ControllerofadifferentoperationalmodeoranynonNAC Controllerswitchtype.
Note: NAC Controllers can not share the same policy domain with any other
non-NAC Controller switch type.