Skip to content

Latest commit

 

History

4 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation


NAC Enforcement Script

Deployment script used for enforcing NAC on one or multiple sites.


The configuration templates maintained inside this repo use JINJA2.

Documentation:
The templating language is JINJA2, documentation is located here: 
https://jinja.palletsprojects.com/en/3.0.x/

Prerequisites

  • LogicMonitor API Tokens
    If using Logic Monitor for deployment method
    
  • Install the required libraries
    pip3 install -r requirements.txt
    

Getting Started

Modify the input.json file with the relevant detail. There are two modes, Logic Monitor mode or Manual mode.

Logic Monitor Mode:

  • Set the mode inside the input.json file to LM
  • Add the SiteID in scope. NOTE: The IPS field is still mandatory, but ignored
[
    {
    "mode": "LM",
    "siteID": "25707",
    "vlans": [
        "101",
        "102"
        ],
    "voice_vlan": 100,
    "ips": [
        "10.132.182.2"
    ],
    "country": "Brazil"
    }
]

Manual Mode:

  • Set the mode inside the input.json file to IP
  • Add the individual switch IP addresses to the list inside the JSON file.
  • Add the Country, following the LogicMonitor convention (Check the settings.json file if in doubt)
[
    {
    "mode": "IP",
    "siteID": "25707",
    "vlans": [
        "101",
        "102"
        ],
    "voice_vlan": 100,
    "ips": [
        "10.132.182.2"
    ],
    "country": "Brazil"
    }
]

About

Automatically configure Cisco switches for 802.1X enforcement mode

Resources

Stars

0 stars

Watchers

1 watching

Forks

Releases

Packages

Contributors

Languages