Extreme Networks AG200 User Manual page 250

802.1X Quarantine Method
21) Click Finish.
13 Configure the Sentriant AG-to-IAS connector—
a Modify the INI file for your network environment.
Sentriant AG returns one of five postures for an endpoint attempting to authenticate. For each
posture received, a different RADIUS response to the switch can be configured using RADIUS
attributes. This response determines into what VLAN the endpoint is placed.
Healthy—The endpoint passed all tests or no failed tests were configured to quarantine.
Checkup—The endpoint failed a test and the action is configured to grant temporary access.
Quarantined—The endpoint failed a test and the action is configured to quarantine.
Unknown—The endpoint has not been tested.
Infected—The endpoint failed the Worms, Virus, and Trojans test.
To configure the response, edit the
listed as follows:
-------------------------------------------------------------------------------------
-
;
; TO DO - Replace <NAS IP> with the IP address of your 802.1X enabled switch
;
[SAIASConnector-<NAS IP>]
;
; TO DO - Replace <SERVER IP> with the IP address of your NAC server
;
[Global]
NASList=192.168.200.135
ServerUrl=https://<SERVER IP>:89/servlet/AccessControlServlet
ServerUrl.1=https://<SERVER IP.1>:89/servlet/AccessControlServlet
ServerUrl.2=https://<SERVER IP.2>:89/servlet/AccessControlServlet
ServerUrl.3=https://<SERVER IP.3>:89/servlet/AccessControlServlet
ServerUrl.4=https://<SERVER IP.4>:89/servlet/AccessControlServlet
ServerUrl.5=https://<SERVER IP.5>:89/servlet/AccessControlServlet
DebugLevel=4
Debug=on
Username=nacuser
Password=nacpwd
;
; If the Sentriant AG server cannot be contacted reply to RADIUS with the following
posture
; 0=healthy, 10=checkup, 20=quarantined, 30=infected, 100=unknown
;
250
file. The various settings in the file are
SAIASConnector.ini
Sentriant AG Users' Guide, Version 5.0