Change location 

Course Length Format
Select an option
Implementing Cisco Network Admission Control (NAC) v3.0 3 days Lecture/lab
Course outline

Lesson 1: Understanding Cisco NAC

  • Introduction to Cisco Network Admission Control
  • Cisco NAC Components
  • NAC Deployment Comparisons
  • Understanding the Cisco NAC Posture Validation Process
  • Understanding the Cisco NAC Status Query Process
  • EAP-FAST
  • Protected Access Credential
  • Understanding Access Restrictions for Postured Clients
  • Understanding Cisco NAC Deployment Scenarios

Lesson 2: Configuring Cisco Secure ACS for Cisco NAC

  • Using Cisco Secure ACS as a Cisco NAC AAA Policy Server
  • NAC Features
  • Task 1: Install the Cisco Secure ACS Server
  • Task 2: Import Vendor AVPs
  • Task 3: Add a NAD AAA Client
  • Task 4: Configure the Administrator Interface and Admininstrator Access
  • Task 5: Install and Configure the Cisco Secure ACS Certificate
  • Task 6: Configure Global Authentication
  • Task 7: Configure Service Logs
  • Task 8: Configure Shared Profile Components
  • Task 9: Configure Posture Validation
  • Task 10: Configure Group and Vendor Attributes
  • Task 11: Create Network Access Profiles
  • Task 12: Configure a Clientless User, NRH, or NAH

Lesson 3: Configuring Cisco Routers for Cisco NAC

  • Using Cisco Routers as Cisco NAC Network Access Devices
  • Task 1: Configure AAA
  • Task 2: Configure a RADIUS Server
  • Task 3: Configure an Interface ACL
  • Task 4: Configure an Intercept ACL
  • Task 5: Configure a Cisco NAC Global Policy
  • Task 6: Configure the Cisco NAC Interface
  • Task 7: Configure Clientless Host (NAH or NRH) Support
  • Task 8: Set EAPoUDP Timers
  • Task 9: Enable a Cisco IOS HTTP Server
  • Task 10: Enable EAPoUDP Logging
  • Using Cisco IOS NAD Troubleshooting Commands

Lesson 4: Configuring Cisco Switches for Cisco NAC

  • Using Cisco Switches as Cisco NAC Network Access Devices
  • Common Switch Configurations
  • Configure AAA
  • Configure a RADIUS Server
  • Configure an Interface ACL
  • Configure a Cisco NAC Global Policy
  • Configure the Cisco NAC Interface
  • Configure Clientless Host Support (NAH or NRH)
  • Set EAPoUDP Timers
  • Enable a Cisco IOS HTTP Server
  • Enable EAPoUDP Logging
  • NAC L2 IP Commands
  • NAC L2 802.1x Commands
  • Using Cisco IOS Switch NAD Troubleshooting Commands

Lesson 5: Configuring Cisco NAC Agents

  • Using Cisco Agents as Cisco NAC Clients
  • Configuring Cisco Trust Agent for Cisco NAC
  • Using Cisco Security Agent with Cisco NAC

Lesson 6: Configuring Cisco Wireless Access Points for Cisco NAC

  • EAP-FAST
  • RADIUS-Based VLAN Access Control
  • RADIUS Attributes
  • Wireless Configuration Tasks
  • Configuring AAA
  • Configuring RADIUS
  • Configuring VLAN Support
  • Using Cisco IOS Access Point NAD Troubleshooting Commands
Course labs

Lab 1-1: Configure Cisco Secure ACS for Cisco NAC
Lab 1-2: Configure a Cisco Router as a NAD
Lab 1-3: Verify a Clientless Host (NAH or NRH)
Lab 1-4: Install Cisco Trust Agent 2.0
Lab 1-5: Configure a Cisco Switch for NAC L2 IP
Lab 1-6: Configure a Trend Micro Policy Server for Cisco NAC
Lab 1-7: Configure a Cisco Switch for NAC L2 802.1x
Lab 1-8: Configure a Cisco Wireless Access Point for Cisco NAC


CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, Cisco IOS, Cisco Systems, the Cisco Systems logo, and Networking Academy are registered trademarks or trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. All other trademarks mentioned in this document or Web site are the property of their respective owners.