IC is used in 802.1x scenario. Currently am running a test scenario before actual deployment; and configured such that if notepad.exe is running then endpt is compliant. Its observed that although if notepad.exe doesnt run, I get compliant vlan applied to the switchport and during reevaluation of policies, I get the correct vlan pushed. Similarly few times its observed that although endpoint is non-compliant get compliant vlan and during reevaluation get the correct vlan. i have ensured that switch is not misbehaving.As a workaround I configured reevauation time as "0", after which I get correct vlan based on compliance / NC, but policy doesnt refersh. I have captured relevant logs for it. Just to update, I have IC & LDAP in time synch (using NTP on IC). If i set the reevaluation as 1, then i get correct vlan after 1 min and the vlan thats applied before that cant be guaranteed! Is it some problem with IC config or with Host checker on endpoint machine or something else? I have attached the logs for your reference. Thanks in advance ... View more

Hi, Req:Implement IC4000 in campus network (across all branch off) with Active Directory. Scenario: 1. Have only a single IC box (without IE). 2. Have approx 4 branch offices with a single AD server at the Corp. office and all edge switches are Nortel make and 802.1x compatible. All offices are interconnected using Point-Point links. 3. Each branch office network is independent and does not have any VLANs extended to branch. 4. Users types are the employees and visitors. Employees should get access to LAN (eg VLAN-10), if authenticated and comply to the policies, else be placed in remediation VLAN(eg VLAN-100); visitors irrespective or compliance / non-compliance to be placed in a visitor vlan (eg VLAN-200). Please let me know if this is workable and steps to configure it. Thanks. Krishna Message Edited by krix on 08-16-2009 01:32 AM ... View more