Enterasys Networks 7S4280-19-SYS - Manual (Page 85)

The NAC Controller Policy Configuration
Enterasys NAC Controller Hardware Installation Guide 6-17
See Figure 6‐24 to help visualize how you would determine the NAC Controller mode of
operation. Starting at the end‐user and moving up stream, the position of the first NAC Controller
is downstream of the first router in its path. This NAC Controller functions in L2 operations
mode. Continuing to move upstream past the router, the next NAC Controller is upstream of the
first router in its path. This NAC Controller functions in L3 operations mode.
Figure 6-24 Determining NAC Controller Mode of Operation
NAC Controllers of the same mode of operation must by assigned to their own unique policy
domain. For example, you can have multiple L2 NAC Controllers in one domain and multiple L3
NAC Controllers in another domain, but you canʹt combine L2 and L3 NAC Controllers in the
same domain.
Because the two NAC Controllers shown in Figure 6‐24 are of different operational modes, they
must each belong to a separate policy domain from each other as well as any other switch in the
network.
Assure that all NAC Controllers of the same operational mode are in a policy domain not shared
with any NAC Controller of a different operational mode or any non‐NAC Controller switch type.
Note: NAC Controllers can not share the same policy domain with any other
non-NAC Controller switch type.