This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

a minor question from the step by step guide 802.1x

Question
0

Sign in to vote

I am reading and trying out the

Step By Step Guide: Demonstrate 802.1X NAP Enforcement in a Test Lab

one of the steps is raising domain functional to 2003, but the guide did not explain the reason

I've done some searching but no luck

is it the basic requirement for a domain to run NAP??

thank you very much

btw, does Cisco catalyst 2950 supports this lab? It doesn't show in the switches lists.

Thank you.

Regards

Andrew Chan

Tuesday, May 6, 2008 5:48 AM

Answers

0

Sign in to vote

The reason you need to raise the funtionality level is to support the NAP GPO settings. As for the Catalyst 2950, it does support 802.1x but you may have problems giving your VLANs full network support. It is a layer 2 only switch and it only supports one interface IP.

However, for testing and demo purposes, you can prove that it will accept VLAN tags and move clients as they transition from non-compliant to compliant.

Thanks,

Clay

Tuesday, May 6, 2008 3:30 PM

All replies

0

Sign in to vote

The reason you need to raise the funtionality level is to support the NAP GPO settings. As for the Catalyst 2950, it does support 802.1x but you may have problems giving your VLANs full network support. It is a layer 2 only switch and it only supports one interface IP.

However, for testing and demo purposes, you can prove that it will accept VLAN tags and move clients as they transition from non-compliant to compliant.

Thanks,

Clay

Tuesday, May 6, 2008 3:30 PM
0

Sign in to vote

Hey Shawn, just to be clear - NAP does not require a domain - it works just fine in a "workgroup".

{Jeff Sigman}{Senior Program Manager & NAP Hero}{Enterprise Security Group}

{NAP Blog, FAQ, Forum, MSDN, Site and my bloÿg}

Tuesday, May 6, 2008 4:21 PM
0

Sign in to vote

Thank you so much

Wednesday, May 7, 2008 4:35 AM