Cisco 7604

45-14
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 45 Configuring Network Admission Control
Configuring NAC
Step 4
Router(config)# access-list access_list_number
{deny | permit}
source [ source_wildcard ] [log]
Defines an ACL by using a source address and wildcard.
The access_list_number value is a decimal number from
1 to 99 or 1300 to 1999.
Enter deny or permit to specify whether to deny or
permit access if conditions are matched.
The source value is the source address of the network or
host from which the packet is being sent specified as
follows:
• The 32-bit quantity in dotted-decimal format.
• The keyword any as an abbreviation for source and
source_wildcard of 0.0.0.0 255.255.255.255. You do
not need to enter a source_wildcard.
• The keyword host as an abbreviation for source and
source-wildcard of source 0.0.0.0.
(Optional) The source_wildcard applies wildcard bits to
the source.
(Optional) Enter log to cause an informational logging
message about the packet that matches the entry to be
sent to the console.
Step 5
Router(config)# interface interface_id
Enters interface configuration mode.
Step 6
Router(config)# ip access-group
{
access_list_number | name } in
Controls access to the specified interface.
Step 7
Router(config)# ip admission name rule_name
Applies the specified IP NAC rule to the interface.
To remove the IP NAC rule that was applied to a specific
interface, use the no ip admission rule-name interface
configuration command.
Step 8
Router(config)# exit
Returns to global configuration mode.
Step 9
Router(config)# aaa new-model
Enables AAA.
Step 10
Router(config)# aaa authentication eou default
group radius
Sets authentication methods for EAPoUDP.
To remove the EAPoUDP authentication methods, use
the no aaa authentication eou default global
configuration command.
Step 11
Router(config)# ip device tracking
Enables the IP device tracking table.
To disable the IP device tracking table, use the no device
tracking global configuration command.
Command Purpose