Integrating Policy Manager with a Cisco Switch

This section of the Deployment Guide provides the set-up instructions for integrating a Cisco switch with Policy Manager. This includes 802.1x, MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address, and downloadable Access Control List (dACL) authentications.

Cisco switches support multiple authentication methods and many RADIUS Remote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  options that are passed to the switch. This chapter discusses only the subset of Cisco switch configuration features that are required for integration with Policy Manager. Basic familiarity with most Cisco switches is assumed. For in-depth information about the features and functions of Policy Manager, refer to the ClearPass Policy Manager User Guide.

Requirements

Cisco LAN Local Area Network. A LAN is a network of connected devices within a distinct geographic area such as an office or a commercial establishment and share a common communications line or wireless link to a server. switch that supports 802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. 802.1X provides an authentication framework that allows a user to be authenticated by a central authority. and MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. Authentication Bypass

DHCP Dynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network.  server for the registration VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. and the mandatory VLANs Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. (see VLAN Numbers)

Current Policy Manager release

Verify that a basic configuration of Policy Manager has been completed, which consists at minimum of initial set up and configuring a generic RADIUS Remote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  service.