44-11
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 44 Configuring Network Admission Control
Configuring Network Admission Control with LAN Port IP
Enabling or Disabling the Bypassing of LAN Port IP Posture Validation for Clientless Hosts
To globally enable or disable the bypassing of the LAN port IP posture validation for clientless hosts,
perform this task in privileged mode (the default is disable):
This example shows how to enable the bypassing of the LAN port IP posture validation for clientless
hosts:
Console> (enable) set eou allow clientless enable
EoU Clientless hosts will be allowed
Console> (enable)
Statically Authorizing an IP Address as an Exception Host Device and Applying a Policy to the
Device
This command allows a specific IP address to be treated as an exception host and when that host is
detected, it will dynamically install the policy specified by the policy name.
Note If the policy template does not exist, entering these commands creates the policy template.
To statically authorize an IP device and apply an associated policy to the device, perform this task in
privileged mode:
This example shows how to statically authorize an IP device and apply an associated policy to the device:
Console> (enable) set eou authorize ip 172.20.52.19 255.255.255.224 policy poll
Mapped IP address 172.20.52.0 IP mask 255.255.255.224 to policy name poll
Console> (enable)
Statically Authorizing a MAC Address as an Exception Host Device and Applying a Policy to the
Device
This command allows a specific MAC address to be treated as an exception host and when that host is
detected, it will dynamically install the policy specified by the policy name.
Note If the policy template does not exist, entering these commands creates the template.
Task Command
Enable or disable the bypassing of the LAN port
IP posture validation for clientless hosts.
set eou allow clientless {enable | disable}
Task Command
Statically authorize an IP device and apply an
associated policy to the device.
set eou authorize ip ip_addr policy policy_name
set eou authorize ip ip_addr ip_mask policy
policy_name
To Next Page
Loading...
Need help?
General