We've just been adding the switch's MAC address to the device filter.

Benjamin McDonald
Information Systems Coordinator
George Washington University
W: 202.994.3934
C: 202.207.4112



Kurt Huenemann wrote:

> Dear Perfigo/CCA users,
>
> We've had a very successful rollout of CleanAccess 3.5.4 at Heidelberg
> College this fall.  I hope one of you can help with an odd "side-effect"
> that I hope to resolve....
>
> We have Cisco 3550 switches in the Res Halls, and they each have an IP
> address in the same VLAN as the student residents.  Once we turn over
> control of that VLAN to the CleanAccess server, we can no longer
> ping/telnet/browse to those edge switches from anywhere outside the 
> managed
> VLAN.
>
> Cisco TAC suggested that I add those switches' IP addresses to the CCA
> Manager via CCA.Servers>>Filters>>Subnets with a /32 mask and "Allow" 
> which
> I have done.  This sounds like it should work, but there is no change in
> behavior.
>
> How are you addressing your edge devices so they can still be 
> seen/managed
> from the core or elsewhere on your network?
>
> Thanks, in advance, for your suggestions.
>
> Kurt
>
> ____________________________________________________
> Kurt E. Huenemann '83
> Assoc. Director of Information Technology
> Asst. Professor of Computer Science
> Heidelberg College
> 310 East Market Street
> Tiffin, OH 44883
>
> Internet: [log in to unmask]
> Fax:      419-448-2176
> Voice:    419-448-2351
> ____________________________________________________
>