Novell ZENworks Network Access Control 5.0, User Manual, Page: 85 / 534

System Configuration 85
no
vd
ocx
(e
n)
24
Ma
rch 20
09
8 Enter the
Password
with which to log into the device's console.
9 Re-enter the console password.
10 Enter the password with which to enter enable mode.
11 Re-enter the enable mode password.
12 Enter the networks (using CIDR notation) that this device is in direct control over in the
Network list
text field. This is only necessary if the device does not send its IP address
with its supplicant request.
13 Enter the
Cisco port mask
in the text field. This specifies which characters within the
endpoint identifier returned by the Cisco device contain the bank and port information of the
endpoint. All offsets start at 0, so a mask of 2/34 indicates character 3 for the bank and
characters 4 and 5 for the port. If the Cisco device were to return 50210 for an endpoint, a port
mask of 2/34 would indicate that the endpoint is on bank 2 and port 10 (2/10), where 210 are
the third, fourth and fifth bytes in the identifier.
14
Enter the
Reconnect idle time
. This is the amount of time in milliseconds that a telnet /
SSH console can remain idle or unused before it is reset.
15 Select the
Show scripts
plus symbol to show the following scripts:
Š
Initialization script — The expect script used to log into the console and enter enable
mode.
Š Re-authentication script — The expect script used to perform endpoint re-
authentication.
Š
Exit script — The expect script used to exit the console.
16 Click
ok
.
TIP: Click revert to defaults to restore the default settings.
CatOS User Name in Enable Mode
If you have your CatOS switch configured to run in enable mode with a user name, the expect script
supplied with Novell ZENworks Network Access Control will not run “out of the box.”
Workaround: Do not use a user name with your switch, or modify the expect script in the console to
include the user name.
To modify the expect script in the Novell ZENworks Network Access Control user
interface:
Home window>>System configuration>>Quarantining menu option
1 Click edit next to an 802.1X device. (You can also perform these steps while you are adding an
802.1X device.)
2 Click the plus sign next to
Show scripts
.
3 Add the correct expect script syntax to the text box for enable mode user name. See your switch
documentation for more information on the correct syntax.
4 Click
ok
.