Network Access Control

Hi,

would like to know , is there a way to backup configuration for LAN enforcer?

Any backup plan if LAN Enforcer down in NAC environment.

i can think of failover configuration of the LAN enforcer.

Enforcer configurations are all stored in the group that it belongs to. Click on the Enforcer Group, under tasks you will notice that there is an option to Export Properties/Settings. This will create a XML file.

The XML file is all you need. The next time you re-register your Enforcer with SEPM, Click on the new Enforcer Group and select Import Properties/Settings. All settings previously configured and exported will be ported in.

Once Enforcer receives this policy ID, remember to do a reboot on the Enforcer. ( The reboot is suggested due to my experience.)

Sorry,

If I had understood you wrongly and you were refering to those settings that you see when you issue a "show config" command in a Enforcer, I'm afraid you will probably have to take note of it manually.

Workaround is use Putty to do a SSH to the Enforcer, ensure logging is enabled so it write to a textfile. Once logged in, issue command  "show configure" the entire configuration displayed will be written to a text file.

Use that textfile in future to reconfigure Enforcer accordingly.