System Administration
VLAN Tagging
15-32
VLAN Tagging
In some cases, such as when the DHCP server is in a separate VLAN than the
span/mirror port, the mirrored port traffic is 802.1q tagged. In this case, in
order for NAC 800 to recognize the traffic, the following workaround must be
performed.
1.
Set up the virtual interface:
a.
Log in to each ES that is monitoring a port using SSH or directly with
a keyboard.
b. Enter the following command at the command line:
cd /etc/sysconfig/network-scripts
c.
For 802.1X mode:
i.
Enter the following at the command line:
cp ifcfg-eth1 ifcfg-eth1.1
ii. Open the ifcfg-eth1.1 file with a text editor such as vi.
iii. Change the following line:
DEVICE=eth1
To:
DEVICE=eth1.1
d. For DHCP mode:
i.
Enter the following at the command line:
cp ifcfg-eth0 ifcfg-eth0.1
ii. Open the ifcfg-eth0.1 file with a text editor such as vi.
iii. Change the following line:
DEVICE=eth0
To:
DEVICE=eth0.1