User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 14 Network Access Profiles
OL-14386-02
User Guide for Cisco Secure Access Control Server 4.2
Using Profile Templates
Note Do not use the Populate from Global button; otherwise, this authentication field will be inherited from
the settings in the Global Authentication Setup in System Configuration.
Table 14-5 describes the content of the Profile in the NAC Layer 2 IP Sample Profile Template.
Table 14-5 NAC Layer 2 IP Profile Sample
Section Property Value
NAP Name User configurable
Description User configurable
Profile NAF N/A
Protocol N/A
Advance filter ([[26/9/1]Cisco av-pair]aaa:service = ip_admission)
AND ([006]Service-Type != 10)
Authentication PEAP Allow Posture Only is checked
Credential Validation Database N/A
Posture Validation Posture Name NAC-EXAMPLE-POSTURE-EXAMPLE
Validation
Rule
Required credential
types
Cisco:PA
Selected internal
posture policies
NAC-SAMPLE-CTA-POLICY
Selected external
posture policies
N/A
System Posture System Posture PA message URL Redirect
Token configuration Token
Healthy Healthy N/A
Checkup Checkup N/A
Transition Transition N/A
Quarantine Quarantine N/A
Infected Infected N/A
Unknown Unknown N/A
Table 14-6 describes the content of the Authorization Rules in the NAC Layer 2 IP Sample Profile
Template.
Table 14-6 Authorization Rules for NAC Layer 2 IP Profile Template
Authorization Rules User-Group
System Posture
Token RAC DACL
Rule 1 N/A Healthy NAC-SAMPLE-
HEALTHY-L3-RAC
Rule 2 N/A Quarantine NAC-SAMPLE-
QUARANTINE-L3-RAC
NAC-SAMPLE-
HEALTHY-ACL
NAC-SAMPLE-
QUARANTINE-ACL
14-13