Installation Overview - HP 800 User Manual

DHCP Plug-in

Installation Overview

NOTE:
13-4
Installation Overview
When NAC 800 does not sit inline with the DHCP server, you need to set up a
remote host for Device Activity Capture (DAC) to allow NAC 800 to listen on
the network. This is done by installing a small program on the DHCP server
or other remote (non-NAC 800) host, which then sends relevant endpoint
device information back to NAC 800.
Windows Server 2003 is the only server supported for this release.
To install the DHCP plug-in:
1. The DHCP plug-in requires that you first configure your system with
RDAC as described in "Creating a DAC Host" on page 12-2.
2. Download and install the DHCP plug-in as described in "Installing the
Plug-in" on page 13-7.
3. On the NAC 800 MS, enter the following commands and follow the on-
screen instructions:
a.
/usr/local/nac/bin/MakeDHCPCert
This command generates a file named server.pem in the current
directory. This file contains a key and certificate signed by the CA.
The DHCP plug-in responds to SSL connections from NAC 800 by
providing this certificate.
b. Copy the server.pem file (from the directory where it was created
in step a above) to the C:\WINDOWS\system32\dhcp directory.