Cisco Layer 3 Switch Integration Script (6500 SUP720)

This document provides scripts required to complete the installation of the NAC Solution

NAC Router Integration Script

conf t

mls flow ip interface-full

mls nde sender

no mls aclmerge odm optimizations

ip flow-export destination x.x.x.x 50001 (Replace with IP of AD server and remove this comment)

ip access-list extended impulse_block

permit ip any host 198.31.193.211

ip access-list extended intranet

remark allow DNS

permit udp any any eq domain

remark allow DHCP

permit udp any any eq bootps

remark allow access to AD server

permit ip any host x.x.x.x (Replace with IP of AD server and remove this comment)

remark allow access to AV server

permit ip any host x.x.x.x (Replace with IP of AV server and remove this comment)

remark allow RDP access to blocked hosts

permit tcp any eq 3389 any

route-map impulse deny 10

*Note – Be sure to also allow the NAC Enforcer access to the router if a VTY/SSH access-list is present on the router.

Last updated on

Was this page helpful?