Cisco 7604 Configuration Manual page 798

Configuring NAC
Command
Step 4
Router(config)# access-list access_list_number
{deny | permit} source [ source_wildcard ] [log]
Step 5
Router(config)# interface interface_id
Step 6
Router(config)# ip access-group
{ access_list_number | name } in
Step 7
Router(config)# ip admission name rule_name
Step 8
Router(config)# exit
Step 9
Router(config)# aaa new-model
Step 10
Router(config)# aaa authentication eou default
group radius
Step 11
Router(config)# ip device tracking
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
45-14
Chapter 45 Configuring Network Admission Control
Purpose
Defines an ACL by using a source address and wildcard.
The access_list_number value is a decimal number from
1 to 99 or 1300 to 1999.
Enter deny or permit to specify whether to deny or
permit access if conditions are matched.
The source value is the source address of the network or
host from which the packet is being sent specified as
follows:
The 32-bit quantity in dotted-decimal format.
•
The keyword any as an abbreviation for source and
•
source_wildcard of 0.0.0.0 255.255.255.255. You do
not need to enter a source_wildcard.
The keyword host as an abbreviation for source and
•
source-wildcard of source 0.0.0.0.
(Optional) The source_wildcard applies wildcard bits to
the source.
(Optional) Enter log to cause an informational logging
message about the packet that matches the entry to be
sent to the console.
Enters interface configuration mode.
Controls access to the specified interface.
Applies the specified IP NAC rule to the interface.
To remove the IP NAC rule that was applied to a specific
interface, use the no ip admission rule-name interface
configuration command.
Returns to global configuration mode.
Enables AAA.
Sets authentication methods for EAPoUDP.
To remove the EAPoUDP authentication methods, use
the no aaa authentication eou default global
configuration command.
Enables the IP device tracking table.
To disable the IP device tracking table, use the no device
tracking global configuration command.
OL-4266-08