Cisco Layer 3 Switch Integration Script (Nexus 7000)

This document provides scripts required to complete the installation of the NAC Solution

NAC Router Integration Script

conf t
!
feature pbr
feature netflow
!
flow record sc-record
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
!
flow exporter sc-exporter
destination x.x.x.x (replace x.x.x.x with IP of NAC server and remove this comment)
transport udp 50001
source vlan x (replace x with management VLAN and remove this comment)
version 5
!
flow monitor sc-monitor
exporter sc-exporter
record sc-record
!
flow timeout active 60
flow timeout inactive 15
!
ip access-list extended impulse_block
permit ip any host 198.31.193.211
!
ip access-list extended intranet
remark allow DNS
permit udp any any eq domain
remark allow DHCP

*Note – Be sure to also allow the NAC Enforcer access to the router if a VTY/SSH access-list is present on the router.

Next to read:
Cisco Layer 3 Switch Integration Script (Nexus 7000 F2/3 Module)
On This Page
Cisco Layer 3 Switch Integration Script (Nexus 7000)