Configuring groups and extended profiles 159
Table 24
Configuring groups (cont’d.)
/cfg/doamin #/aaa/group #
followed by:
agentmode <continuou
s | runonce | never>
Establishes Nortel Health Agent monitoring mode.
Select continuous for cyclic monitoring of the
end point by Nortel Health Agent. The user must
keep the initial browser window open for the
duration of the session.
Select runonce for one cycle of checking only.
The user can close the browser after Nortel Health
Agent has run and the end point has been moved
to the Green zone.
runonce is applied automatically when the
end point operating system is MacOS or Linux.
The Nortel Health Agent integrity check is not
performed on non-Windows operating systems.
Nortel Health Agent does not run when never
is selected and network access is determined by
authentication only. The system proceeds as if the
device passed the Nortel Health Agent integrity
check.
Filter_only enforcement is applied automatically
for non-Windows operating systems and when
never is selected (see enftype below).
macreg
<true | false>
Provides access to the local MAC database from
the client PC.
true allows group members to add or modify
entries; false denies access.
For information about managing a local MAC
database, see “Managing the local MAC
database” (page 206).
Nortel Secure Network Access Switch
Using the Command Line Interface
NN47230-100 03.01 Standard
28 July 2008
Copyright © 2007,2008 NortelNetworks
.