Figure 50: Add A Quarantine Area - Extreme Networks Sentriant AG Software User's Manual

System Configuration
1 Click add a quarantine area. The Add quarantine area window appears.

Figure 50: Add a Quarantine Area

2 In the Add quarantine area window, enter the following information:
Quarantined subnet—The CIDR network that represents the IP space and netmask.
■
DHCP IP Range—The start and end DHCP IP addresses to be assigned to quarantined
■
endpoints.
Gateway—The gateway temporarily assigned to endpoints.
■
Domain suffix—The domain name assigned to DHCP clients.
■
Non-quarantined subnets—All subnetworks on your LAN except those specified in the
■
quarantined subnet field, separated by a carriage return.
NOTE
The quarantine area subnets and non-quarantined subnets should be entered using Classless Inter-domain Routing
address (CIDR) notation (see
3 Choose a DHCP quarantine option:
Router access control lists (ACLs)—This option restricts the network access of non-compliant
■
endpoints by assigning DHCP settings on a quarantined network. The network, gateway, and
ACLs restricting traffic must be configured on your router, which is accomplished by multinetting
or adding a virtual interface to the router that acts as the quarantine gateway IP address. The
quarantine area DHCP settings must reflect this configuration on your router. The subnets
specified in each area must be unique; that is, neither the quarantined nor the non-quarantined
subnets in one area can be quarantined or non-quarantined in another.
Static routes assigned on the endpoint —This option restricts the network access of non-
■
compliant endpoints by vending DHCP settings with no gateway and a netmask of
255.255.255.255. Static routes and a Web proxy server built into Sentriant AG allow the endpoint
access to specific networks, IP addresses, and Web sites. These networks, IP addresses, and Web
110
"Entering Networks Using CIDR Format" on page 316).
Sentriant AG Software Users Guide, Version 5.3