Enterasys-networks 9034385 Manuel d'utilisateur Page 16

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 98
  • Table des matières
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 15
NAC Solution Components
1-6 Overview
ofsupportingauthenticationand/orauthorization.TheNACControllerisalsorequiredinIPSec
andSSLVPNdeployments.
TheNACControllerprovidesintegratedvulnerabilityassessmentserverfunctionalityand
supportsbothagentless(networkbased)andagentbasedassessment.(Aseparatelicenseis
requiredforintegratedassessment.)Italsosupportstheabilityto
connecttomultipleexternal
assessmentserversincludingNessusandLockdownEnforcer.
TheNACControllercanbeconfiguredinoneoftwomodesofoperation:Layer2orLayer3.The
modeofoperationcontrolshowconnectingendsystemsaredetectedbytheNACControlleron
thenetworkandisselectedbased
onwheretheNACControllerispositionedinthenetworkin
relationtotheseendsystems.IftheNACControllerispositionedbeforethefirstroutedboundary
forconnectingendsystems,closertotheaccessedgeofthenetwork,theLayer2NACController
modeisutilized.Inthismode
ofoperation,theNACControllerdetectsconnectingendsystems
onthenetworkbyreceivingtrafficfromanewMACaddress.IftheNACControllerispositioned
afterthefirstroutedboundarydeeperinsidethenetwork,theLayer3NACControllermodeis
utilized.Inthismodeofoperation,theNACController
detectsconnectingendsystemsonthe
networkbyreceivingtrafficfromanewIPaddress.WiththeNACControllersupportingboth
Layer2andLayer3modesofoperation,theNACControllercanbestrategicallypositionedinthe
networktopologytoachievethedesiredlevelofscalabilityandsecurity.
TheNAC
Controllerisavailableintwomodels:
•2S408225SYS‐24Port10/100/1000NACControllersupportsupto2000concurrentend
systems.
7S428019SYS‐18PortSFPNACControllersupportsupto2000concurrentendsystems.
Vue de la page 15
1 2 ... 11 12 13 14 15 16 17 18 19 20 21 ... 97 98

Commentaires sur ces manuels

Pas de commentaire