Introduction

CNaaS NAC provides a way for clients to authenticate themselves using IEEE 802.1X and/or MAB.

Features:

• Automatic registration of MAB clients.
• Periodic cleanup of inactive clients.
• Replication between primary and secondary server.
• API which can be used for all sorts of integrations.
• Port-locking, possible to bind clients to a single switch port for enhanced security.
• Fancy web UI written in React.

...

To launch the frontend we must first have CNaaS Auth POC running, instructions available here: CNaaS Auth POC server installation.  The compose file f or CNaaS NAC Front looks like this:

version: '3.7'
services:
  cnaas_front:
    build: ./front/
    ports:
      - 4443:4443
    environment:
      - NAC_API_URL=https://url-to-nac-api/
      - NAC_FRONT_URL=https://url-to-cnaas-front/
      - AUTH_API_URL=https://url-to-cnaas-auth-poc/
    volumes:
      - type: volume
        source: cnaas-front-cert
        target: /opt/cnaas/cert
volumes:
  cnaas-front-cert:
    external: true

The three variables above should point to the URL the NAC API container exposes, the URL to the CNaaS NAC Front container and finally URL to the auth server. This works in the same way as for CNaaS NMS.