HP 800 Series, User Manual

Page: 402 / 586

DHCP Plug-in
Installation Overview
13-4
Installation Overview
When NAC 800 does not sit inline with the DHCP server, you need to set up a
remote host for Device Activity Capture (DAC) to allow NAC 800 to listen on
the network. This is done by installing a small program on the DHCP server
or other remote (non-NAC 800) host, which then sends relevant endpoint
device information back to NAC 800.
NOTE:
Windows Server 2003 is the only server supported for this release.
To install the DHCP plug-in:
1. The DHCP plug-in requires that you first configure your system with
RDAC as described in “Creating a DAC Host” on page 12-2.
2. Download and install the DHCP plug-in as described in “Installing the
Plug-in” on page 13-7.
3. On the NAC 800 MS, enter the following commands and follow the on-
screen instructions:
a.
/usr/local/nac/bin/MakeDHCPCert
This command generates a file named
server.pem
in the current
directory. This file contains a key and certificate signed by the CA.
The DHCP plug-in responds to SSL connections from NAC 800 by
providing this certificate.
b. Copy the
server.pem
file (from the directory where it was created
in step a above) to the
C:\WINDOWS\system32\dhcp
directory.
c. After copying the
server.pem
file from the NAC 800 server, delete
the file from its temporary location on the NAC 800 server