Extreme Networks AG200 User Manual page 329

To specify ranges to monitor:
Sentriant AG home window>>System configuration>>Select an Enforcement Cluster>>Advanced menu
option
In the Endpoint detection area, enter the range of addresses to monitor in the IP addresses to monitor
text field. Separate ranges with a hyphen or use CIDR notation.
To specify ranges to ignore:
Sentriant AG home window>>System configuration>>Enforcement clusters & servers>>Select an
Enforcement Cluster>>Advanced menu option
In the Endpoint detection area, enter the range of addresses to ignore in the IP addresses to ignore text
field. Separate ranges with a hyphen or use CIDR notation.
To specify ranges to enforce:
Sentriant AG home window>>System configuration>>Quarantining menu option
1 Select the DHCP radio button in the Quarantine method area.
2 Select the Restrict enforcement of DHCP requests to these relay agent IP addresses radio button.
3 Enter IP addresses in the DHCP relay IP addresses to enforce text box. Enter individual DHCP relay
agent IP addresses, separated by carriage returns. These addresses must be a subset of either the
quarantined or non-quarantined subnets.
NOTE
When using Extreme switches, DHCP relay IP addresses to enforce will NOT work when the quarantine subnet is a
subset of the production network. This is because Extreme switches forward the packets from the IP address closest
to Sentriant AG and not the IP address of the interface closest to the endpoint, so all the DHCPRelay packets will
appear to come from a production network IP address.
For example, the following scenario will not work:
Sentriant AG IP: 10.241.88.20
Production Network: 10.241.90.0/24
Quarantine Network: 10.241.90.160/27 (161-189 for range)
Gateway IP: 10.241.90.190
Non-Quarantine Network(s): 10.241.90.0/25, 10.241.90.128/27, 10.241.90.192/26
Sentriant AG Users' Guide, Version 5.0
System Administration
329