none
关于NAP设置 RRS feed

  • 问题

  • 请都以下NAP设置可以实现吗?

    Your network contains an Active Directory domain named contoso.com. The domain contains three VLANs. The VLANs
    are configured as shown in the following table.

    All client computers run either Windows 7 or Windows 8.
    The corporate security policy states that all of the client computers must have the latest security updates installed. You need to implement a solution to ensure that only the client computers that have all of the required security updates installed can connect to VLAN 1. The solution must ensure that all other client computers connect to VLAN 3. Solution:You implement the DHCP Network Access Protection (NAP) enforcement method.
    Does this meet the goal?

    A. Yes
    B. No

    2018年7月22日 14:30

答案

  • 您好,

    感谢您的发帖。

    根据我的理解来看,我们应该选择BVLAN是对于子网的划分,属于第二层,在这一层中,DHCP是无法提供帮助的。

    802.1XNAP能够将不同的计算机放在不同的VLAN中,而且不同的子网并不一定就是不同的VLAN,在802.1X中您可以配置不同的子网。

    对于DHCP而言,您只能指向不同的子网,连接到VLAN 1是为了实现802.1x不强制执行安全更新。

    更多信息请参考以下有关802.1X的链接:

    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc770861(v=ws.10)

    希望以上内容能够对你有所帮助。

    Best Regards,

    Kallen


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • 已标记为答案 pjj1112 2018年7月23日 14:13
    2018年7月23日 2:38
    版主

全部回复