HP ProCurve J9065A Manual de usuario
ProCurve Network Access
Controller 800
Revision 1.0
Quick-start Guide
Central Management
Quick-start Card-2
Central Management
NAC 800 uses clusters and servers. A cluster is a logical grouping of one or
more Enforcement servers (ESs) that are managed by one Management server
(MS).
The quarantine method is defined per cluster; all of the Enforcement servers
in a given cluster use the same quarantine method (Inline, DHCP, or 802.1X).
When using multiple clusters, each cluster can have a different quarantine
method. Clusters cooperate to test and control access to the network.
Physical Deployment
NAC 800 installs in one of the following ways:
■Inline – When deploying NAC 800 inline, NAC 800 monitors and
enforces all device traffic. When NAC 800 is deployed as a single-
server installation, NAC 800 becomes a Layer 2 bridge that requires
no changes to the network configuration settings. When NAC 800 is
installed in a multiple-server installation, you might have to configure
the switch that connects the NAC 800 enforcement servers to use
Spanning Tree Protocol (STP) if STP is not already configured.
NAC 800 allows devices to access the network or blocks devices from
accessing the network based on their Internet Protocol (IP) address
with a built-in firewall (iptables).
■DHCP – When deploying NAC 800 inline with a Dynamic Host Config-
uration Protocol (DHCP) server, all DHCP requests pass through the
NAC 800 server(s) Layer 2 bridge. For a quarantined device, NAC 800
distributes the quarantined IP address for the device. If NAC 800
allows the device to have access, NAC 800 allows your real DHCP
server to distribute a non-quarantined IP address. NAC 800 assigns a
DHCP IP address based on the quarantine area parameters you define
during configuration. You can place restrictions on network access
either at the gateway for the device using Access Control Lists (ACLs),
or on the device by removing the device's gateway and adding static
routes for accessible networks.
■802.1X– When deploying NAC 800 in an 802.1Xenvironment, you must
install it where it can communicate with the Remote Authentication
Dial-In User Service (RADIUS) server (or, NAC 800 has a built-in
Ethernet Information
Quick-start Card-3
RADIUS server that you can use). The RADIUS server communicates
with the switch, which performs the quarantining by moving ports or
MAC addresses in and out of virtual local area networks (VLANs).
Ethernet Information
The Ethernet interfaces should be attached as follows:
■Ethernet Port1 – Connect to the corporate LAN (the internal network
side)
■Ethernet Port2 – Connect to a switch, VPN, or DHCP server (the
Internet or endpoint side)
Port Information
You might need to configure some firewalls and routers to allow NAC 800 to
access the following ports for testing:
■Agentless test method – 137, 138, 139, and 445
■ActiveX and agent-based test method – 1500
■License validation and test updates – update.hp.com port 443
■Software and operating system updates – download.hp.com port 80
User Documents
The following user documents are available at www.procurve.com/nactools:
1. ProCurve Network Access Controller 800 Hardware Installation Guide
– Refer to this document first to see how to prepare for and perform the
physical installation of the appliance and how to establish initial
management access. This document contains appliance specifications,
safety information, and appliance certifications.
2. ProCurve Network Access Controller 800 Configuration Guide – Refer
to this document second, to understand the product's features,
capabilities, and use. This document explains how to configure the
appliance based on the usage model you choose to deploy in your
network.
Updates and Upgrades
Quick-start Card-4
3. ProCurve Network Access Controller 800Users’ Guide – Refer to this
document last for information on configuring, monitoring activities,
creating NAC policies, and running reports.
Updates and Upgrades
See the ProCurve Network Access Controller 800 Configuration Guide for
information on updates and upgrades.
Getting Support
ProCurve prides itself on providing exceptional customer support.
See Technical support – www.procurve.com
Hewlett-Packard Company
8000 Foothills Boulevard, m/s 5551
Roseville, California 95747-5551
http://www.hp.com/go/hpprocurve
© Copyright 2007Hewlett-Packard Development Company, L.P. All Rights Reserved.
Tabla de contenidos
Otros manuales de Enrutador de red de HP
HP
HP StorageWorks N1200-320 Manual de usuario
HP
HP 5120 SI Series Manual de usuario
HP
HP MSR1002-4 Manual de usuario
HP
HP HP 830 Series Manual de usuario
HP
HP FlexNetwork HSR6600 Manual de usuario
HP
HP HP ProCurve Series 6600 Manual de instalación
HP
HP StorageWorks SR2122 Manual de usuario
HP
HP A6604 Manual de usuario
HP
HP MSR930 3G Manual de usuario
HP
HP A6616 Manual de usuario
HP
HP MSR SERIES Manual de instalación
HP
HP A6602 Manual de usuario
HP
HP FlexNetwork MSR Series Manual de instalación
HP
HP MSR SERIES Manual de instalación
HP
HP MSR2000 Series Manual de usuario
HP
HP 5900 Manual de usuario
HP
HP 7000dl Series Manual de usuario
HP
HP 5920 Manual de usuario
HP
HP Pavilion a6600 Manual de usuario
HP
HP StorageWorks MPX200 Manual de usuario
Manuales populares de Enrutador de red de otras marcas
NETGEAR
NETGEAR FS526T - Switch Manual de usuario
Korenix
Korenix JetNet 5710G Series Manual de usuario
Automated Logic
Automated Logic ZN551 Manual del propietario
Cisco
Cisco ASR 1000 Series Manual del operador
EnGenius
EnGenius ESR-9710 Manual de usuario
Cisco
Cisco 805 Series Instrucciones de funcionamiento y seguridad