Figure 126: Add A Nac Policy, Endpoints Area - Extreme Networks Sentriant AG Software User's Manual

NAC Policies
11 Click the Endpoints menu option to open the Endpoints window, shown in the following figure:

Figure 126: Add a NAC Policy, Endpoints Area

12 Enter one or more sets of endpoints to be assigned to the NAC policy.
a Select an ID type.
DHCP user class - Select this option to enter one or more DHCP user classes which identify
●
groups of endpoints by network interface DHCP class ID.
If the Trust level for this NAC policy is either innocent until proven guilty or whitelist and the
enforcement cluster's quarantine method is DHCP, then endpoints identified by user class can
bypass quarantine and be granted access immediately.
The user class can also be used to identify organizational endpoints whose domain cannot be
determined because of the endpoint's personal firewall.
NOTE
The DHCP user class may be used to identify Windows endpoints only.
IP address, range, or CIDR - Select this option to enter one or more single IP addresses or IP
●
ranges using a hyphen (-) or CIDR notation (see
Format," on page
MAC address or prefix - Select this option to enter one or more MAC addresses using hyphens
●
(-) or colons (:) (for example, 01:23:45:67:89:ab or 01-23-45-67-89-ab), a MAC prefix, or an OUI
(for example, 00:1B:24).
210
316).
Table , "Entering Networks Using CIDR
Sentriant AG Software Users Guide, Version 5.3