Configuring Novell Zenworks Network Access Control For Dhcp; Setting Up A Quarantine Area; Router Configuration - Novell ZENWORKS NETWORK ACCESS CONTROL 5.0 - 09-22-2008 User Manual

10.1 Configuring Novell ZENworks Network
Access Control for DHCP
The primary configuration required for using Novell ZENworks Network Access Control and
DHCP is setting up the quarantine area (see
page 232). You should also review the following topics related to quarantining endpoints:
Endpoint quarantine precedence (see
page 217).
Untested endpoints (see
Unsupported operating systems (see
Settings," on page
Endpoint testing exceptions (see
page 220
Action to take for failed tests (see
DHCP quarantine options:
Router Access Control List (ACL) settings (see
page
Static routes assigned to the endpoint (see
Area," on page
"Deploying Novell ZENworks Network Access Control Using
Network Access Control Installation
The following sections contain more information:
Section 10.1.1, "Setting up a Quarantine Area," on page 232
Section 10.1.2, "Router Configuration," on page 232
Section 10.1.3, "Configuring Windows Update Service for XP SP2," on page 233

10.1.1 Setting up a Quarantine Area

Set up a restricted area of your network that users can access when you do not want to allow full
access to the network. See

10.1.2 Router Configuration

If you do not elect to enforce using static routes on the endpoint
General," on page
This option restricts the network access of non-compliant endpoints by assigning DHCP settings on
a quarantined network. The network, gateway, and ACLs restricting traffic must be configured on
your router, which is accomplished by multinetting or adding a virtual interface to the router that
acts as the quarantine gateway IP address. The quarantine area DHCP settings must reflect this
configuration on your router.
232 Novell ZENworks Network Access Control Users Guide
Section 7.7, "Untestable Endpoints and DHCP Mode," on page
211).
Section 7.3, "Always Granting Access to an Endpoint," on
and Section 7.4, "Always Quarantining an Endpoint," on page
Section 6.3.14, "Selecting Action Taken," on page
233).
106)
Section 3.10, "Quarantining, General," on page 70
70), you will need to configure router ACLs.
Section 10.1.1, "Setting up a Quarantine Area," on
Section 7.1, "Endpoint Quarantine Precedence," on
Section 6.3.12, "Defining Non-supported OS Access
"Configuring the Router ACLs" on
Section 3.12.3, "Adding a DHCP Quarantine
Guide.
(Section 3.10, "Quarantining,
221).
211)
DHCP" in the Novell ZENworks
for instructions.
222).