Skip to content

Automatically configure Cisco switches for 802.1X enforcement mode

Notifications You must be signed in to change notification settings

benea11/Cisco-NAC-Deployment-Automation

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation


NAC Enforcement Script

Deployment script used for enforcing NAC on one or multiple sites.


The configuration templates maintained inside this repo use JINJA2.

Documentation:
The templating language is JINJA2, documentation is located here: 
https://jinja.palletsprojects.com/en/3.0.x/

Prerequisites

  • LogicMonitor API Tokens
    If using Logic Monitor for deployment method
    
  • Install the required libraries
    pip3 install -r requirements.txt
    

Getting Started

Modify the input.json file with the relevant detail. There are two modes, Logic Monitor mode or Manual mode.

Logic Monitor Mode:

  • Set the mode inside the input.json file to LM
  • Add the SiteID in scope. NOTE: The IPS field is still mandatory, but ignored
[
    {
    "mode": "LM",
    "siteID": "25707",
    "vlans": [
        "101",
        "102"
        ],
    "voice_vlan": 100,
    "ips": [
        "10.132.182.2"
    ],
    "country": "Brazil"
    }
]

Manual Mode:

  • Set the mode inside the input.json file to IP
  • Add the individual switch IP addresses to the list inside the JSON file.
  • Add the Country, following the LogicMonitor convention (Check the settings.json file if in doubt)
[
    {
    "mode": "IP",
    "siteID": "25707",
    "vlans": [
        "101",
        "102"
        ],
    "voice_vlan": 100,
    "ips": [
        "10.132.182.2"
    ],
    "country": "Brazil"
    }
]

About

Automatically configure Cisco switches for 802.1X enforcement mode

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published