Extreme Networks Sentriant AG Software User's Manual page 348

System Administration
NOTE
There is one caveat to note with ranges to monitor and ranges to ignore; if endpoints have IP addresses outside of
the ranges to monitor and ranges to ignore, and if the ES is capable of controlling network access for those
endpoints, the endpoints can still be quarantined by consequence of the NAC policy rules for Operating Systems and
Inactive endpoints.
NOTE
Entries made to either Ranges to Monitor or Ranges to Enforce will take effect for newly discovered endpoints only;
Previous entries discovered will not be removed from the display. To permanently remove these entries, run the
resetTestData script from the command line. The script clears all existing endpoints and endpoint test data from the
display.
To specify ranges to monitor:
Home window>>System configuration>>Select an Enforcement Cluster>>Advanced menu option
In the Endpoint detection area, enter the range of addresses to monitor in the IP addresses to monitor text
field. Separate ranges with a hyphen or use CIDR notation.
To specify ranges to ignore:
Home window>>System configuration>>Enforcement clusters & servers>>Select an Enforcement
Cluster>>Advanced menu option
In the Endpoint detection area, enter the range of addresses to ignore in the IP addresses to ignore text
field. Separate ranges with a hyphen or use CIDR notation.
To specify ranges to enforce:
Home window>>System configuration>>Quarantining menu option
1 Select the DHCP radio button in the Quarantine method area.
2 Select the Restrict enforcement of DHCP requests to quarantined or non-quarantined subnets radio button.
3 Enter IP addresses in the DHCP relay IP addresses to enforce text box. Enter individual DHCP relay
agent IP addresses, separated by carriage returns. These addresses are monitored in addition to the
quarantined or non-quarantined subnets.
348
Sentriant AG Software Users Guide, Version 5.3