A default Switch Disconnect action works with Active Responder policies for switches.
This action works dynamically based on IP correlation. You can edit the name of this
action, but cannot make any other changes. Specific instructions are required to implement
this action.
Other actions are available to enact on switches or other network devices that have
been defined in the Network Devices screen in Responder. Use these actions to effect
remediation by directing targeted hosts to network devices or systems for remediation.
The switch actions include the following:
- Switch Disconnect — Instructs the switch to momentarily disable the port, which causes the host to reauthenticate. On reauthentication, the RADIUS server rejects access. A default Switch Disconnect action works with Active Responder policies that apply to switches and works dynamically based on IP correlation. You can edit the name of this action, but you cannot make any other changes.
- NMS Trap — Integration with a network management system (NMS) to use an NMS Trap for a response action. An NMS Trap action sends an SNMP Trap to an NMS and performs other Response actions. NMS-type programs include: 3Com Transcend, 3Com Enterprise Management Suite, 3Com Network Supervisor, OpenNMS, Unicenter, OpenView, SunNet Manager, Traffic Director, eHealth, VitalSuite, and nGenius. Most functions of NMS Trap require access to switches and the associated IP correlation functions.
- Move Quarantine Host onto a VLAN — Moves a host triggered for a response action onto a VLAN. Switch policies can use all of the other available action types including the default actions and other switch actions.