Cisco 2100 Series Configuration Manual page 371

Chapter 6 Configuring WLANsWireless Device Access
Note
To enable or disable NAC out-of-band support for a WLAN or guest LAN, enter this command:
Step 2
config {wlan | guest-lan} nac {enable | disable} {wlan_id | guest_lan_id}
To enable or disable NAC out-of-band support for a specific access point group, enter this command:
Step 3
config wlan apgroup nac {enable | disable} group_name wlan_id
To save your changes, enter this command:
Step 4
save config
To see the configuration of a WLAN or guest LAN, including the NAC state, enter this command:
Step 5
show {wlan wlan_ id | guest-lan guest_lan_id}
Information similar to the following appears:
WLAN Identifier.................................. 1
Profile Name..................................... wlan
Network Name (SSID).............................. wlan
Status........................................... Disabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
NAC-State...................................... Enabled
Quarantine VLAN............................. 110
...
To see the current state of the client (either Quarantine or Access), enter this command:
Step 6
show client detailed client_mac
Information similar to the following appears:
Client's NAC state.................................. QUARANTINE
Note
OL-17037-01
To disable the quarantine VLAN on an interface, enter 0 for the VLAN ID.
The client state appears as "Invalid" if the client is probing, has not yet associated to a WLAN,
or cannot complete Layer 2 authentication.
Cisco Wireless LAN Controller Configuration Guide
Configuring WLANs
6-61