locked
Two NAP Servers with different policies. RRS feed

  • Question

  • Hi

    I've been thinking on my setup if this is possible.

    i already configured my HP Procurve for 802.1X authentication and auto-assigning of ports based on authentication and NAP policies. my test laboratory is working, compliant is place on compliant vlan(10) and non-compliant is placed on non-compliant vlan(20). however our network needs two compliant network 1 for guest and for employee. 

    So the plan setup will be this way:

    VLAN10 = Compliant Users1(Employee)

    VLAN20 = Compliant Users2(Guest)

    VLAN30 = All non-compliant users will be placed in this VLAN along with SCCM to get updates

    Q1: do i need to put up two NAP Server to achieve this kind of setup, i think the configuration on NAP is two network only, 1 for the restricted and another for full access. 

    Thanks,

    Gian

    Thursday, August 1, 2013 4:37 PM

Answers

  • Hi,

    You  no need to put up 2 NAP Server. In fact all you need is just allow access for VLan 10 & 20 & 30 users. Via VLAN tagging.


    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    Microsoft Geeks

    • Proposed as answer by Soh.M Friday, August 2, 2013 5:51 AM
    • Marked as answer by Soh.M Thursday, October 3, 2013 6:08 AM
    Friday, August 2, 2013 5:51 AM