Create the IPv4 network and DHCP ranges as described in Managing IPv4 DHCP Data. You can create multiple DHCP ranges and apply one or more NAC filters to each of them.
By default, DHCP ranges are listed according to their start addresses. You can reorder them according to the order in which you want the member DHCP server to evaluate the ranges.
Consider the following sample DHCP ranges:
If the DHCP range with the NAC filter is listed before the range with no filters, then the DHCP server consults the Sophos NAC Advanced server and applies the NAC filter before it grants a lease. It grants leases from the range with no filters only if no NAC filters matched or after all leases from the first range are exhausted. If the first range is the production range and the second range is for the quarantine group, then the server applies the NAC filters for the production range, before it grants leases to the quarantine range.
To change the order of DHCP ranges in a network:
You can view the DHCP objects in a network, including its DHCP ranges by navigating to the DHCP tab -> Networks tab -> Networks panel, and then clicking the network link. You can select the Priority column for display to view the order of the DHCP ranges. For information about editing the columns, see Customizing Tables.
This page has no comments.