Novell ZENworks Network Access Control 5.0, Руководство пользователя

Страница: 232 / 534

232 Novell ZENworks Network Access Control Users Guide
no
vd
ocx
(e
n)
24
Ma
rch 20
09
10.1 Configuring Novell ZENworks Network
Access Control for DHCP
The primary configuration required for using Novell ZENworks Network Access Control and
DHCP is setting up the quarantine area (see
Section 10.1.1, “Setting up a Quarantine Area,” on
page 232 ). You should also review the following topics related to quarantining endpoints:
Š
Endpoint quarantine precedence (see Section 7.1, “Endpoint Quarantine Precedence,” on
page 217 ).
Š
Untested endpoints (see Section 7.7, “Untestable Endpoints and DHCP Mode,” on page 222 ).
Š Unsupported operating systems (see Section 6.3.12, “Defining Non-supported OS Access
Settings,” on page 211 ).
Š
Endpoint testing exceptions (see Section 7.3, “Always Granting Access to an Endpoint,” on
page 220 and Section 7.4, “Always Quarantining an Endpoint,” on page 221 ).
Š
Action to take for failed tests (see Section 6.3.14, “Selecting Action Taken,” on page 211 )
Š DHCP quarantine options:
Š
Router Access Control List (ACL) settings (see “Configuring the Router ACLs” on
page 233 ).
Š
Static routes assigned to the endpoint (see Section 3.12.3, “Adding a DHCP Quarantine
Area,” on page 106 )
Š “ Deploying Novell ZENworks Network Access Control Using DHCP ” in the Novell ZENworks
Network Access Control Installation Guide .
The following sections contain more information:
Š
Section 10.1.1, “Setting up a Quarantine Area,” on page 232
Š
Section 10.1.2, “Router Configuration,” on page 232
Š
Section 10.1.3, “Configuring Windows Update Service for XP SP2,” on page 233
10.1.1 Setting up a Quarantine Area
Set up a restricted area of your network that users can access when you do not want to allow full
access to the network. See
Section 3.10, “Quarantining, General,” on page 70 for instructions.
10.1.2 Router Configuration
If you do not elect to enforce using static routes on the endpoint ( Section 3.10, “Quarantining,
General,” on page 70 ), you will need to configure router ACLs.
This option restricts the network access of non-compliant endpoints by assigning DHCP settings on
a quarantined network. The network, gateway, and ACLs restricting traffic must be configured on
your router, which is accomplished by multinetting or adding a virtual interface to the router that
acts as the quarantine gateway IP address. The quarantine area DHCP settings must reflect this
configuration on your router.