Cas Mode Ip Addressing Considerations - Cisco NAC-3300 Series Quick Start Manual

2. Cisco highly recommends replacing default password(s) with "strong" passwords (at least 8 characters long,
comprised of a combination of two characters from each of the upper- and lower-case letters, numbers, and special
characters categories)

CAS Mode IP Addressing Considerations

Table 4 CAS Modes— IP addressing Considerations
CAS Mode Comments
Real-IP
NAT (testing Note: NAT is not supported for production deployments
only)
24
• The trusted (eth0) and untrusted (eth1) interfaces of the CAS must be on
different subnets.
• Add static routes on the L3 switch or router to route traffic for the managed
subnets to the trusted interface of the respective CASs.
• If using DHCP relay, make sure the DHCP server has a route back to the
managed subnets.
• The trusted (eth0) and untrusted (eth1) interfaces of the CAS must be on
different subnets.