System Administration
VLAN Tagging
15-34
VLAN Tagging
In some cases, such as when the DHCP server is in a separate VLAN than the
span/mirror port, the mirrored port traffic is 802.1q tagged. In this case, in
order for NAC 800 to recognize the traffic, the following workaround must be
performed.
1.
Set up the virtual interface:
a.
Log in to each ES that is monitoring a port using SSH or directly with
a keyboard.
b. Enter the following command at the command line:
cd /etc/sysconfig/network-scripts
c.
For 802.1X mode:
i.
Enter the following at the command line:
cp ifcfg-eth1 ifcfg-eth1.1
ii. Open the ifcfg-eth1.1 file with a text editor such as vi.
iii. Change the following line:
DEVICE=eth1
To:
DEVICE=eth1.<VLAN ID>
Where:
<VLAN ID> is the VLAN where the DHCP server resides. For
example, if your VLAN ID is 250, use DEVICE=eth1.250
d. Append the following line to the bottom of the file:
VLAN=yes
e.
Modify the IPADDR line if needed.
f.
Save and exit the file.