Enterasys Networks 7S4280-19-SYS - Manual (Page 89)

The NAC Controller Policy Configuration
Enterasys NAC Controller Hardware Installation Guide 6-21
Modifying the Downstream Default Policy
Depending on the network configuration or circumstances, itʹs possible that traffic from the
upstream side could be rerouted to the NAC Controller, where it would be authenticated using
the upstream source IP address. To avoid this problem, add a Layer 3 IP Address Source rule to
the downstream default policy configured on the NAC Controller, using the upstream IP subnets
(or critical servers located in the upstream) and containing the traffic to a VLAN.