Using The Cli To Configure Nac Out-Of-Band Integration - Cisco 2100 Series Configuration Manual

Configuring WLANs
Figure 6-31 AP Groups > Edit (WLANs) Page
e.
f.
g.
h.
Note
Click Save Configuration to save your changes.
Step 4
To see the current state of the client (either Quarantine or Access), follow these steps:
Step 5
a.
b.

Using the CLI to Configure NAC Out-of-Band Integration

Using the controller CLI, follow these steps to configure NAC out-of-band integration.
To configure the quarantine VLAN for a dynamic interface, enter this command:
Step 1
config interface quarantine vlan interface_name vlan_id
Note
Cisco Wireless LAN Controller Configuration Guide
6-60
From the WLAN SSID drop-down box, choose the SSID of the WLAN.
From the Interface Name drop-down box, choose the interface to which you want to map the access
point group. Choose the quarantine VLAN if you plan to enable NAC out-of-band support.
To enable NAC out-of-band support for this access point group, check the NAC State check box. To
disable NAC out-of-band support, leave the check box unchecked, which is the default value.
Click Add to add this WLAN to the access point group. This WLAN appears in the list of WLANs
assigned to this access point group.
If you ever want to remove this WLAN from the access point group, hover your cursor over the
blue drop-down arrow for the WLAN and choose Remove.
Click Monitor > Clients to open the Clients page.
Click the MAC address of the desired client to open the Clients > Detail page. The NAC state
appears under the Security Information section.
The client state appears as "Invalid" if the client is probing, has not yet associated to a
Note
WLAN, or cannot complete Layer 2 authentication.
You must configure a unique quarantine VLAN for each interface on the controller.
Chapter 6 Configuring WLANsWireless Device Access
OL-17037-01