Installation Overview - Extreme Networks Sentriant AG Software User's Manual

DHCP Plug-in
If the DHCP server cannot communicate with Sentriant AG at any time, the DHCP server goes in to
●
an allow all or deny all state, depending on the
C:\WINDOWS\SYSTEM32\DHCP\
Sentriant AG attempts to connect to known DHCP servers on start-up, and continuously attempts to
●
connect at regular intervals indefinitely.

Installation Overview

When Sentriant AG does not sit inline with the DHCP server, you need to set up a remote host for
Device Activity Capture (DAC) to allow Sentriant AG to listen on the network. This is done by
installing a small program on the DHCP server or other remote (non-Sentriant AG) host, which then
sends relevant endpoint device information back to Sentriant AG.
NOTE
Windows Server 2003 is the only server supported for this release.
To install the DHCP plug-in:
1 The DHCP plug-in requires that you first configure your system with RDAC as described in the
"Creating a DAC Host" section of the Users Guide.
2 On the Sentriant AG MS, enter the following commands and follow the on-screen instructions:
a
/usr/local/nac/bin/MakeDHCPCert
This command generates a file named
key and certificate signed by the CA. The DHCP plug-in responds to SSL connections from
Sentriant AG by providing this certificate.
b Copy the
C:\WINDOWS\system32\dhcp
c After copying the
location on the Sentriant AG server
3 Download and install the DHCP plug-in as described in the DHCP Plug-in chapter for "Installing
the Plug-in".
340
config.xml
file (from the directory where it was created in
server.pem
directory.
file from the Sentriant AG server, delete the file from its temporary
server.pem
parameter setting in the
failopen
file (true = allow all, false = deny all).
in the current directory. This file contains a
server.pem
Sentriant AG Software Users Guide, Version 5.2
step a above) to the