NAC (Network Admission Control) is a security mechanism that consolidates policies for devices attempting to access a network. Once NAC has been enabled for a campus building, all network devices in the building (computers, printers, game consoles, etc.) need to be registered before full network access will be possible. For Windows and Macintosh personal computers, the NAC registration process involves downloading and installing a small application, the Cisco Clean Access Agent. (For GNU/Linux and all other non-Windows and non-Macintosh operating systems, see below.)

Once the Agent is installed, it generates a login window that asks for your Network ID and password. The authentication process registers your computer to your Network ID. Since a key component of NAC is "role-based" security, i.e., the level of network security applied to a device is tied to the role of its owner (employee, student, guest, etc.), it's important that you register yourself and not have a friend, colleague, or roommate go through the registration process on your computer.

The Cisco Clean Access Agent does not monitor your network activity, but it remains on your computer for future authentication to the Lafayette network. If you remove the Agent from your computer, you will need to reinstall it the next time the authentication process is required. (The current plan is to require NAC registration periodically.)

Before beginning the NAC registration process, please verify that your computer is connected to a network cable and that both ends of the cable are seated securely.

Note: the registration process associates a computer with a person. You should complete the process on your computer only and not on someone else's.

Instructions for:

Windows XP and Windows Vista Clean Access Agent instructions

  1. Open a web browser, e.g., Mozilla Firefox. (If you choose to use Internet Explorer, you may need to click past and accept any security windows that appear during the process.) If you are not automatically redirected to the Network Admission Control page, type in any web address and you should then see the page. If you still don't see the Network Admission Control page, call the Help Desk.
  2. At the "Lafayette Network Admission Control" page enter your Network ID and password and click [Continue].
  3. Read the "Clean Access Agent Installer Download" instructions and click the [Download Clean Access Agent] button when finished.
  4. When prompted, choose to save the file to your Desktop or another location of your choice. (Some configurations of Firefox will download the file to your Desktop by default without prompting.)
  5. Locate the file and double-click it to begin installation. Vista users will need to right-click on the downloaded file and choose Run as administrator.
  6. Proceed through the "InstallShield Wizard" clicking [Next] as required and accepting the default installation location.
  7. After the installation is completed, you will be presented with a "Cisco Clean Access Agent" login window. (Note: this may take a minute to appear.) Enter your Network ID and password and click the [Login] button. Leave the "Remember Me" box unchecked.
  8. You will receive confirmation when your computer successfully gains access to the network.
  9. The installer file can be deleted if desired; ITS recommends you leave any Clean Access Agent shortcut icons in place.

Mac OS X Clean Access Agent instructions

  1. Open a web browser, e.g., Mozilla Firefox. If you are not automatically redirected to the Network Admission Control page, type in any web address and you should then see the page. If you still don't see the Network Admission Control page, call the Help Desk.
  2. At the "Lafayette Network Admission Control" page enter your Lafayette Network ID and password and click [Continue].
  3. Read the "Clean Access Agent Installer Download" instructions and click the [Download Clean Access Agent] button when complete.
  4. When prompted, choose to save the file to your Desktop or another location of your choice. Some configurations of Firefox will download the file to your Desktop by default without prompting. Double-click the CCAA file to begin installation.
  5. Proceed through the installation instructions accepting the default installation location.
  6. Enter your computer's administrative password when prompted. The software displays a progress bar while installing; when installation is complete, you will be presented with a "Cisco Clean Access Agent" login window. (Note: this may take a minute.)
  7. Enter your Network ID and password and click the [Login] button.
  8. You will receive confirmation when your computer successfully gains access to the network.
  9. The installer file can be deleted if desired; ITS recommends you leave any Clean Access Agent shortcut icons in place.

GNU/Linux and all other non-Windows and non-Macintosh operating systems

There is currently no Clean Access Agent for Linux et. al. Rather, the "Lafayette Network Admission Control" page should recognize your computer as running an OS other than Windows or Macintosh, and successful authentication will complete the registration process.

You may need to manually renew your IP address or reboot your computer after authentication.

NAC Home

1/22/09