Network Access Control

I have entered a few MAC addresses in the SNAC Appliance using the MAB DATABASE ADD command. Now i need to find out which are the MAC addresses i have already added in the database of the appliance.

I know we can go to the LINUX mode of the SNAC Appliance. But once in the LINUX mode, where is the location where these MAC's are saved.

Please help. This is very important for me.

You need to use the show command

Monitor show blocked-hosts command

The monitor show blocked-hosts command displays a blocked client's IP address,

host name, username, client profile, required profile, blocked status, host integrity

status (Gateway Enforcer appliance only). A blocked client includes information

about managed users and connected clients.

This command displays a blocked client's a blocked client's IP address, host name,

username, MAC address, client profile, required profile, blocked status, host

integrity status (DHPC Enforcer appliance only).
ftp://ftp.symantec.com/public/english_us_canada/products/symantec_network_access_control/11.0/manuals/mr4/Enforcer_Implementation_Guide.pdf

Please refer page 260 on this link.

There is a location in LAN Enforcer where all the MAC Addresses are saved. I want to know that location to check the MAC Addresses already added in the BYPASS LIST.

Once we reach the ENFORCER# promt, we can type LINUX and press enter
This takes us to the LINUX mode of the appliance. Now once in this mode, i need to know the file location where all the MAC Addresses reside.

you can export them to a TFTP server. you cannot view them from the CLI.

I don't remember the exact command now, you will find it under MAB I  guess.

Regards,

Actually i found out how to view the MAC Addresses bypassed using the MAB Database on Enforcer.
Once logged in to command line of Enforcer, type LINUX and press ENTER
Then go into the location - /opt/LanEnforcer/conf
Then list the contents of "MabLocaleDataBase.txt" file.
All the addresses would be listed there.