-
Cisco NAC Appliance - Clean Access Manager Configuration Guide, Release 4.7(5)
-
About This Guide
-
Introduction
-
Device Management: Adding Clean Access Servers, Adding Filters
-
Switch Management: Configuring Out-of-Band Deployment
-
Wireless LAN Controller Management: Configuring Wireless Out-of-Band Deployment
-
Configuring User Login Page and Guest Access
-
User Management: Configuring User Roles and Local Users
-
User Management: Configuring Authentication Servers
-
User Management: Traffic Control, Bandwidth, Schedule
-
Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment
-
Cisco NAC Appliance Agents
-
Monitoring and Troubleshooting Agent Sessions
-
Configuring Network Scanning
-
Monitoring Event Logs
-
Administering the CAM
-
Error and Event Log Messages
-
API Support
-
MIB Support
-
Open Source License Acknowledgements
-
Index
-
FeedbackTable Of Contents
Obtaining Documentation and Submitting a Service Request
About This Guide
Revised October 20, 2011, OL-19354-01This preface includes the following sections:
•
Obtaining Documentation and Submitting a Service Request
Audience
This guide is for network administrators who are implementing the Cisco NAC Appliance solution to manage and secure their networks. Cisco NAC Appliance comprises the Clean Access Manager (CAM) administration appliance, Clean Access Server (CAS) enforcement appliance, and Agent end-user client software. Use this document along with the Cisco NAC Appliance Hardware Installation Guide, Release 4.7 and Cisco NAC Appliance - Clean Access Server Configuration Guide, Release 4.7(5) to install, configure, and administer your Cisco NAC Appliance deployment.
Purpose
The Cisco NAC Appliance - Clean Access Manager Configuration Guide, Release 4.7(5) describes how to configure the Clean Access Manager NAC Appliance. You can use the Clean Access Manager (CAM) and its web-based administration console to manage multiple Clean Access Servers (CASs) in a deployment. End users connect through the Clean Access Server to the network via web login or Agent. This guide describes how to use the CAM web administration console to configure most aspects of Cisco NAC Appliance. It also provides information specific to the Clean Access Manager, such as how to manage network switches in an Out-of-Band deployment. See Product Documentation for further details on the document set for Cisco NAC Appliance.
Document Organization
Table 1 Document Organization
Provides a high-level overview of the Cisco NAC Appliance solution
Chapter 2 "Device Management: Adding Clean Access Servers, Adding Filters"
Describes how to add and manage Clean Access Servers from the Clean Access Manager and configure device and/or subnet filters
Chapter 3 "Switch Management: Configuring Out-of-Band Deployment"
Describes how to configure Cisco NAC Appliance for Out-of-Band (OOB) deployment
Chapter 4 "Wireless LAN Controller Management: Configuring Wireless Out-of-Band Deployment"
Describes how to configure Cisco NAC Appliance for Wireless Out-of-Band (Wireless OOB) deployment.
Explains how to add the default login page needed for all users to authenticate, customize the login page for web login users, and configure Cisco NAC Appliance for guest user login
Chapter 6 "User Management: Configuring User Roles and Local Users"
Explains how to create user roles and new user profiles
Chapter 7 "User Management: Configuring Authentication Servers"
Describes how to set up external authentication sources, configure Active Directory Single Sign-On (SSO), VLAN ID or attribute-based auth server mapping rules, and RADIUS accounting
Chapter 8 "User Management: Traffic Control, Bandwidth, Schedule"
Describes how to configure role-based traffic control policies, bandwidth management, session and heartbeat timers
Chapter 9 "Configuring Cisco NAC Appliance for Agent Login and Client Posture Assessment"
Describes how to configure Agent distribution and installation for client machines, as well as configure client posture assessment in the Cisco NAC Appliance system
Presents overviews, login flow, and session termination dialogs for the Cisco NAC Appliance Agents (Cisco NAC Agent and Cisco NAC Web Agent)
Provides information on compiling and accessing various Cisco NAC Appliance Agent reports and log files and troubleshooting Agent connection and operation issues
Describes how to set up network scanning for Cisco NAC Appliance
Describes the Monitoring module of Cisco NAC Appliance, including online users, event logs, and SNMP information
Discusses the Administration pages for the Clean Access Manager
Explains some common Cisco NAC Appliance error messages and event log entries
Discusses API support for the Clean Access Manager
Contains Open Source License information for Cisco products
Document Conventions
New Features in this Release
For a brief summary of the new features and enhancements available in this release refer to Documentation Updates and the "New and Changed Information" section of the Release Notes for Cisco NAC Appliance.
Product Documentation
lists documents are available for Cisco NAC Appliance on Cisco.com at the following URL:
http://www.cisco.com/en/US/products/ps6128/tsd_products_support_series_home.html
Tip
Table 3 Cisco NAC Appliance Document Set
•
•
Support Information for Cisco NAC Appliance Agents, Release 4.5 and Later
•
•
•
Getting Started with Cisco NAC Network Modules in Cisco Access Routers
•
•
Details on the latest 4.7 release, including:
•
•
•
•
•
Cisco NAC Appliance Hardware Installation Guide, Release 4.7
Details on CAM/CAS installation topics:
•
•
•
•
Cisco NAC Appliance - Clean Access Manager Configuration Guide, Release 4.7(5)
Complete CAM details, including:
•
•
•
•
Cisco NAC Appliance - Clean Access Server Configuration Guide, Release 4.7(5)
CAS-specific details, including:
•
•
•
•
Cisco NAC Appliance Migration Guide - Release 4.1(8) to Release 4.7(0)
•
Documentation Updates
Table 4 Updates to Cisco NAC Appliance - Clean Access Manager Configuration Guide, Release 4.7(5)
10/20/11
Added Disabling Administrator Prompt for Certificate on IE 8 and 9
8/19/11
Updates for Release 4.7(5)
•
•
•
•
•
9/23/10
Updates for Release 4.7(3)
•
•
•
•
•
6/14/10
Minor text updates.
3/5/10
Resolved caveat CSCte07657 with minor additions to Configuration Notes and Configure Switch Profiles
2/8/10
Updates for Release 4.7(2)
•
•
•
11/24/09
Updates for Release 4.7(1):
•
•
•
•
10/21/09
Updated Backing Up the CAM Database
9/29/09
Release 4.7(0)
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What's New in Cisco Product Documentation as an RSS feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service. Cisco currently supports RSS Version 2.0.
