Novell ZENworks Network Access Control 5.0, Руководство пользователя

Страница: 371 / 534

System Administration 371
no
vd
ocx
(e
n)
24
Ma
rch 20
09
4 Select
System Configuration>>Enforcement clusters & servers
.
5 Click
delete
next to the ES you want to move.
6 In the command line window of the ES, enter the following command:
resetSystem.py
7 Log in to the MS user interface of the server that you want to manage the ES.
8
Add the ES by following the directions in Section 3.4.1, “Adding an ES,” on page 44 .
16.18 Recovering Quickly from a Network Failure
If you have a network with a very large number of endpoints (around 3000 endpoints
per ES), and your network goes down, perform the following steps to make sure that
your endpoints can reconnect as quickly as possible:
1 Place all of the clusters that have a large number of endpoints in allow all mode:
1a Select
System configuration
.
1b Click a cluster name.
1c Select the
allow all
radio button.
1d Click
ok
.
2 Leave the cluster in allow all mode for a full test cycle. If your test cycle is to retest endpoints
every two hours, leave the cluster in allow all mode for two hours. To check the length of your
test cycle:
2a Select
NAC policies
.
2b Click a policy name.
2c Select the
Basic settings
menu option.
2d In the
Retest frequency
area, check the
Retest endpoints every X
hours
text field.
NOTE: The retest frequency can be different for each policy.
3 Move the clusters back to normal mode:
3a Select
System configuration
.
3b Click a cluster name.
3c Select the
normal
radio button.
3d Click
ok
.
16.19 VLAN Tagging
In some cases, such as when the DHCP server is in a separate VLAN than the span/mirror port, the
mirrored port traffic is 802.1q tagged. In this case, in order for Novell ZENworks Network Access
Control to recognize the traffic, the following workaround must be performed.
1 Set up the virtual interface:
1a Log in to each ES that is monitoring a port using SSH or directly with a keyboard.
1b Enter the following command at the command line: