Installation Overview - HP ProCurve NAC 800 User Manual

DHCP Plug-in

Installation Overview

NOTE:
13-4

Installation Overview

When NAC 800 does not sit inline with the DHCP server, you need to set up a
remote host for Device Activity Capture (DAC) to allow NAC 800 to listen on
the network. This is done by installing a small program on the DHCP server
or other remote (non-NAC 800) host, which then sends relevant endpoint
device information back to NAC 800.
Windows Server 2003 is the only server supported for this release.
To install the DHCP plug-in:
1. The DHCP plug-in requires that you first configure your system with
RDAC as described in the "Creating a DAC Host" section of the Users
Guide.
2. On the NAC 800 MS, enter the following commands and follow the on-
screen instructions:
a.
/usr/local/nac/bin/MakeDHCPCert
This command generates a file named server.pem in the current
directory. This file contains a key and certificate signed by the CA.
The DHCP plug-in responds to SSL connections from NAC 800 by
providing this certificate.
b. Copy the server.pem file (from the directory where it was created
in step a above) to the C:\WINDOWS\system32\dhcp directory.
c. After copying the server.pem file from the NAC 800 server, delete
the file from its temporary location on the NAC 800 server
3. Download and install the DHCP plug-in as described in the DHCP Plug-in
chapter for "Installing the Plug-in".