IBM Tivoli and Cisco manual Network enforcement subsystem implementation, 213

7

Chapter 7. Network enforcement subsystem implementation

This chapter contains detailed descriptions for the installation and configuration of the following network enforcement subsystem components:

￿Configuring NAC Framework components

–Configuring the Cisco Secure ACS for NAC L2 802.1x

–Configuring the Cisco Secure ACS for NAC L2/L3 IP

–Deployment of the network infrastructure

￿Configuring NAC Appliance components

–Installing the CCA Agent

–Configuring Out-Of-Band Virtual Gateway Server

–Deployment of the network infrastructure

Note: Although the installation for the Cisco Trust Agent client software logically belongs to the network enforcement subsystem implementation, it had to be installed prior to the Tivoli Security Compliance Manager client software covered in Chapter 6, “Compliance subsystem implementation” on page 125. The detailed instructions for setting up the CTA client can be found in 6.3.1, “Cisco Trust Agent” on page 190.

© Copyright IBM Corp. 2005, 2007. All rights reserved. 213