Thick wireless edge, Thick wireless edge -7 – Enterasys Networks 9034385 User Manual

Page 45

Advertising
background image

Scenario 2: Intelligent Wireless Access Edge

Enterasys NAC Design Guide 3-7

Thick Wireless Edge

In a thick wireless deployment, access points forward wireless end‐system traffic directly onto the 
wired infrastructure without the use of a wireless switch. Thick wireless deployments may or may 
not be categorized under the intelligent wireless access edge use scenario depending on the 
functionality supported by the APs.

The following figure illustrates how the NAC Gateway and the other Enterasys NAC components 
provide network access control in a thick wireless deployment.

Figure 3-4 Intelligent Wireless Access Edge - Intelligent AP (RFC 3580 Compliant

Wireless Access

Point

1

4

5

2

3

3

Enterasys

NAC Manager

NAC Gateway

(out-of-band appliance)

Assessment

Server

Authentication

Server

(optionally integrated

in NAC Gateway)

VLAN= Production

1

2

3

4

5

NAC Functions

Detect

Authenticate

Assess

Authorize

Remediate

Remediation

Web Page

3

5

VLAN= Quarantine

Advertising