Enterasys-networks 9034385 Uživatelský manuál stáhnout pdf (Strana 67)

Procedures for Out-of-Band and Inline NAC

Enterasys NAC Design Guide 5-3

Figure 5-1 Security Domain

NAC Configurations

EachSecurityDomainhasadefault“NACconfiguration”thatdefinestheauthentication,

assessment,andauthorizationparametersforallend‐systemsconnectinginthatdomain.A

SecurityDomaincanalsoincludeMACoruseroverriderulesthatareusedtooverridetheNAC

configurationparameterswithaspecialNACconfigurationtobe

usedforspecificend‐systemsor

endusers.

1 2 ... 62 63 64 65 66 67 68 69 70 71 72 ... 97 98

Enterasys 1
Contents 5
Chapter 3: Use Scenarios 6
Chapter 4: Design Planning 6
Chapter 5: Design Procedures 6
About This Guide 9
Getting Help 10
Overview 11
Deployment Models 12
NAC Solution Overview 13
NAC Solution Components 14
NAC Gateway Appliance 15
NAC Controller Appliance 15
1-6 Overview 16
Appliance Comparison 17
1-8 Overview 18
NetSight Management 19
RADIUS Server 20
Assessment Server 20
1-12 Overview 22
NAC Deployment Models 23
Features and Value 24
Implementation 26
User-Based Authorization 28
MAC Registration 28
Inline NAC 31
Remediation 34
2-16 NAC Deployment Models 38
Use Scenarios 39
Policy-Enabled Edge 40
RFC 3580 Capable Edge 41
Scenario 1 Implementation 42
Thin Wireless Edge 43
3-6 Use Scenarios 44
Thick Wireless Edge 45
Scenario 2 Implementation 46
3-10 Use Scenarios 48
Scenario 4: VPN Remote Access 49
Scenario 4 Implementation 50
3-14 Use Scenarios 52
Design Planning 53
Survey the Network 54
4-4 Design Planning 56
End-System Capabilities 58
Authentication Considerations 59
4-8 Design Planning 60
Wired LAN 61
Wireless LAN 61
Remote Access WAN 62
Site-to-Site VPN 62
Remote Access VPN 63
4-12 Design Planning 64
Design Procedures 65
5-2 Design Procedures 66
NAC Configurations 67
Authentication 68
Assessment 68
Authorization 69
5-6 Design Procedures 70
5-8 Design Procedures 72
5-10 Design Procedures 74
MAC Overrides 76
5-14 Design Procedures 78
User Overrides 80
Assessment Design Procedures 81
5-18 Design Procedures 82
5-20 Design Procedures 84
5-22 Design Procedures 86
6. VLAN Configuration 88
7. Policy Role Configuration 88
8. Define NAC Access Policies 88
Assessment Policy 90
Quarantine Policy 91
Inline NAC Design Procedures 92
7S4280-19-SYS Up to 2000 94
2S4082-25-SYS Up to 2000 94
5-32 Design Procedures 96
Additional Considerations 97
5-34 Design Procedures 98

Komentáře k této Příručce

Žádné komentáře

Enterasys-networks 9034385 Uživatelský manuál Strana 67

Komentáře k této Příručce

Související produkty a manuály pro Nástroje Enterasys-networks 9034385