mu-mu-disallow
(switch-to-wired)
nac-mode
[bypass-nac-except-
include-list|do-nac-
except-exclude-list|none]
Disallows frames from one mobile unit to another mobile
unit on this WLAN
• switch-to-wired – Disallows by switching the frame out
on the wired side (to allow an externalswitch to decide
whether this frame is to be allowed or dropped)
Sets the Network Access Control (NAC) mode configuration
• bypass-nac-except-include-list – No MU NAC check is
done except for those in include list. Devices in the
include-list have NAC checks
• do-nac-except-exclude-list – A MU NAC check is done
except for those in the exclude list. Devices in the
exclude list will not have any NAC checks
• none – NAC disabled, no NAC is done. An MU can only
get authenticated by a Radius server
Wireless Instance
20-57