Extreme Networks Sentriant AG200 Bedienungsanleitung

Extreme Networks, Inc.

3585 Monroe Street

Santa Clara, California 95051

(888) 257-3000

(408) 579-2800

http://www.extremenetworks.com

Sentriant AG Users’ Guide, Version 5.0

Published: June 2007

Part number: 120395-00 Rev 06

Alpine, Alpine 3804, Alpine 3802, Altitude, BlackDiamond, BlackDiamond 6808, BlackDiamond 6816, EPICenter,

Ethernet Everywhere, Extreme Ethernet Everywhere, Extreme Networks, Extreme Turbodrive, Extreme Velocity,

ExtremeWare, ExtremeWorks, ExtremeXOS, GlobalPx Content Director, the Go Purple Extreme Solution Partners

Logo, Sentriant, ServiceWatch, Summit, Summit24, Summit48, Summit1i, Summit4, Summit5i, Summit7i, Summit

48i, SummitRPS, SummitGbX, Triumph, vMAN, the Extreme Networks logo, the Alpine logo, the BlackDiamond

logo, the Summit logos, the Extreme Turbodrive logo, and the Color Purple, among others, are trademarks or

registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and other countries. Other

names and marks may be the property of their respective owners.

Specifications are subject to change without notice.

Merit is a registered trademark of Merit Network, Inc. Solaris and Java are trademarks of Sun Microsystems, Inc.

in the U.S. and other countries. Avaya is a trademark of Avaya, Inc.

All other registered trademarks, trademarks and service marks are property of their respective owners.

Sentriant AG Users’ Guide, Version 5.0 3

Table of Contents

Table of Contents ............................................................................................................................ 3

List of Figures ............................................................................................................................... 15

List of Tables ................................................................................................................................ 19

Chapter 1: Introduction.................................................................................................................. 21

Sentriant AG Home Window .......................................................................................................21

System Monitor.........................................................................................................................22

Sentriant AG v5.0 for v4.x Users ................................................................................................24

Overview ..................................................................................................................................27

The Sentriant AG Process.....................................................................................................29

About Sentriant AG .............................................................................................................29

NAC Policy Definition ....................................................................................................29

Endpoint Testing...........................................................................................................29

Compliance Enforcement ...............................................................................................30

Automated and Manual Repair........................................................................................30

Targeted Reporting ........................................................................................................31

Technical Support.....................................................................................................................31

Additional Documentation..........................................................................................................31

Installing and Upgrading............................................................................................................32

Conventions Used in This Document ...........................................................................................32

Navigation Paragraph...........................................................................................................32

Note Paragraph ...................................................................................................................32

Caution Paragraph...............................................................................................................33

Warning Paragraph ..............................................................................................................33

Bold Font ...........................................................................................................................33

Task Paragraph ...................................................................................................................33

Italic Text...........................................................................................................................33

Courier Font .......................................................................................................................34

Angled Brackets..................................................................................................................34

Square Brackets..................................................................................................................34

Terms ................................................................................................................................35

Copying Files ............................................................................................................................35

SCP ...................................................................................................................................35

PSCP .................................................................................................................................36

Chapter 2: Clusters and Servers ..................................................................................................... 37

Single-server Installation......................................................................................................38

Multiple-server Installations .................................................................................................39

Chapter 3: System Configuration .................................................................................................... 43

Introduction .............................................................................................................................43

Enforcement Clusters and Servers...............................................................................................44

Table of Contents

Sentriant AG Users’ Guide, Version 5.0

Enforcement Clusters ................................................................................................................45

Adding an Enforcement Cluster ............................................................................................45

Editing Enforcement Clusters ...............................................................................................47

Viewing Enforcement Cluster Status......................................................................................48

Deleting Enforcement Clusters..............................................................................................49

Enforcement Servers .................................................................................................................50

Adding an ES......................................................................................................................50

Cluster and Server Icons ......................................................................................................51

Editing ESs ........................................................................................................................52

Changing the ES Network Settings........................................................................................54

Changing the ES Date and Time ...........................................................................................54

Modifying the ES root Account Password ...............................................................................55

Viewing ES Status ...............................................................................................................55

Deleting ESs.......................................................................................................................56

ES Recovery .......................................................................................................................57

Management Server...................................................................................................................57

Viewing Network Settings.....................................................................................................57

Modifying MS Network Settings ............................................................................................58

Selecting a Proxy Server.......................................................................................................58

Setting the Date and Time ...................................................................................................59

Automatically Setting the Time.............................................................................................60

Manually Setting the Time ...................................................................................................60

Selecting the Time Zone ......................................................................................................61

Modifying the MS root Account Password ..............................................................................61

Checking for Sentriant AG Upgrades .....................................................................................62

Changing the Sentriant AG Console Timeout ..........................................................................62

User Accounts ..........................................................................................................................63

Adding a User Account ........................................................................................................63

Searching for a User Account ...............................................................................................65

Sorting the User Account Area..............................................................................................66

Copying a User Account .......................................................................................................66

Editing a User Account ........................................................................................................67

Deleting a User Account ......................................................................................................68

User Roles................................................................................................................................68

Adding a User Role .............................................................................................................69

Editing User Roles ..............................................................................................................71

Deleting User Roles.............................................................................................................72

Sorting the User Roles Area..................................................................................................72

License ....................................................................................................................................72

Updating your License Key...................................................................................................73

Test Updates ............................................................................................................................74

Manually Checking for Test Updates .....................................................................................74

Selecting Test Update Times................................................................................................75

Viewing Test Update Logs ....................................................................................................75

Quarantining.............................................................................................................................76

Selecting the Quarantine Method..........................................................................................76

Entering Basic 802.1X Settings............................................................................................77

Selecting the RADIUS Authentication method........................................................................78

Configuring Windows Domain Settings...................................................................................79

Configuring OpenLDAP Settings............................................................................................81

Adding 802.1X Devices .......................................................................................................83

Table of Contents

Sentriant AG Users’ Guide, Version 5.0 5

Testing the Connection to a Device .......................................................................................84

Cisco IOS ...........................................................................................................................85

Cisco CatOS .......................................................................................................................87

Enterasys ...........................................................................................................................89

Extreme ExtremeWare..........................................................................................................90

Extreme XOS ......................................................................................................................92

Foundry..............................................................................................................................93

HP ProCurve Switch ............................................................................................................95

HP ProCurve WESM ............................................................................................................98

HP ProCurve 420 AP or HP ProCurve 530 AP ......................................................................100

Nortel ..............................................................................................................................102

Other ...............................................................................................................................104

Setting DHCP Enforcement ................................................................................................106

Adding a DHCP Quarantine Area.........................................................................................107

Sorting the DHCP Quarantine Area......................................................................................109

Editing a DHCP Quarantine Area.........................................................................................109

Deleting a DHCP Quarantine Area .......................................................................................110

Maintenance...........................................................................................................................110

Initiating a New Backup.....................................................................................................111

Restoring From a Backup ...................................................................................................112

Downloading Support Packages ................................................................................................112

Cluster Setting Defaults ...........................................................................................................112

Testing Methods ...............................................................................................................113

Selecting Test Methods................................................................................................113

Ordering Test Methods.................................................................................................114

Recommended Test Methods........................................................................................114

Selecting End-user Options ................................................................................................115

Accessible Services ...........................................................................................................115

Exceptions........................................................................................................................118

Always Granting Access to Endpoints and Domains.........................................................118

Always Quarantine Endpoints and Domains....................................................................119

Notifications.....................................................................................................................119

Enabling Notifications .................................................................................................120

End-user Screens ..............................................................................................................121

Specifying an End-user Screen Logo .............................................................................122

Specifying the End-user Screen Text .............................................................................123

Specifying the End-user Test Failed Pop-up Window.......................................................123

Agentless Credentials ........................................................................................................124

Adding Windows Credentials.........................................................................................125

Testing Windows Credentials ........................................................................................126

Editing Windows Credentials ........................................................................................127

Deleting Windows Credentials.......................................................................................127

Sorting the Windows Credentials Area ...........................................................................127

Logging..................................................................................................................................128

Setting ES Logging Levels..................................................................................................128

Setting 802.1X Devices Logging Levels ...............................................................................129

Advanced Settings ..................................................................................................................130

Setting the Agent Read Timeout .........................................................................................130

Setting the RPC Connection Timeout ..................................................................................131

Setting the RPC Command Timeout ....................................................................................131

Chapter 4: Endpoint Activity......................................................................................................... 133

Table of Contents

Sentriant AG Users’ Guide, Version 5.0

Filtering the Endpoint Activity Window ......................................................................................134

Filtering by Access Control or Test Status ............................................................................135

Filtering by Time...............................................................................................................136

Limiting Number of Endpoints Displayed.............................................................................136

Searching.........................................................................................................................137

Access Control States ..............................................................................................................138

Test Status States ...................................................................................................................139

Viewing Endpoint Access Status ...............................................................................................141

Selecting Endpoints to Act on ..................................................................................................142

Acting on Selected Endpoints...................................................................................................142

Manually Retest an Endpoint..............................................................................................142

Immediately Grant Access to an Endpoint............................................................................143

Immediately Quarantine an Endpoint ..................................................................................143

Clearing Temporary Endpoint States....................................................................................144

Viewing Endpoint Information...................................................................................................144

Chapter 5: End-user Access ......................................................................................................... 147

Endpoints Supported...............................................................................................................147

Browser Version ......................................................................................................................147

Browser Settings .....................................................................................................................148

Agentless Settings...................................................................................................................148

Ports Used for Testing .............................................................................................................149

Firewall Settings .....................................................................................................................149

Managed Endpoints...........................................................................................................150

Unmanaged Endpoints.......................................................................................................150

Allowing the Windows RPC Service through the Firewall........................................................150

Allowing Sentriant AG through the OS X Firewall ..................................................................153

End-user Access Windows........................................................................................................155

Opening Window ...............................................................................................................156

Windows NAC Agent Test Windows .....................................................................................157

Automatically Installing the Windows Agent ...................................................................157

Removing the Agent ....................................................................................................160

Manually Installing the Windows Agent..........................................................................160

How to View the Windows Agent Version Installed...........................................................161

Mac OS Agent Test Windows ..............................................................................................162

Installing the MAC OS Agent ........................................................................................162

Verifying the Mac OS Agent..........................................................................................166

Removing the Mac OS Agent ........................................................................................169

ActiveX Test Windows ........................................................................................................170

Agentless Test Windows.....................................................................................................170

Testing Window.................................................................................................................173

Test Successful Window ....................................................................................................173

Temporary Quarantine Window ...........................................................................................174

Testing Cancelled Window..................................................................................................175

Testing Failed Window.......................................................................................................175

Setting the Temporary Access Period.............................................................................176

Error Windows...................................................................................................................177

Customizing Error Messages .....................................................................................................177

Chapter 6: NAC Policies .............................................................................................................. 185

Table of Contents

Sentriant AG Users’ Guide, Version 5.0 7

Standard NAC Policies.............................................................................................................186

NAC Policy Group Tasks ..........................................................................................................186

Add a NAC Policy Group ....................................................................................................186

Editing a NAC Policy Group................................................................................................187

Deleting a NAC Policy Group ..............................................................................................188

NAC Policy Tasks ....................................................................................................................188

Enabling or Disabling an NAC Policy ...................................................................................188

Selecting the Default NAC Policy ........................................................................................188

Creating a New NAC Policy ................................................................................................189

Editing a NAC Policy .........................................................................................................193

Copying a NAC Policy ........................................................................................................193

Deleting a NAC Policy........................................................................................................194

Moving a NAC Policy Between NAC Policy Groups ................................................................194

Assigning Endpoints and Domains to a Policy ......................................................................194

NAC Policy Hierarchy ........................................................................................................195

Setting Retest Time...........................................................................................................195

Setting Connection Time....................................................................................................195

Defining Non-supported OS Access Settings ........................................................................196

Setting Test Properties ......................................................................................................196

Selecting Action Taken ......................................................................................................197

About Sentriant AG Tests.........................................................................................................197

Viewing Information About Tests.........................................................................................198

Selecting Test Properties ...................................................................................................198

Entering Software Required/Not Allowed........................................................................198

Entering Service Names Required/Not Allowed...............................................................199

Entering the Browser Version Number ...........................................................................199

Test Icons ........................................................................................................................200

Chapter 7: Quarantined Networks .................................................................................................201

Endpoint Quarantine Precedence..............................................................................................201

Using Ports in Accessible Services and Endpoints ......................................................................203

Determining Accessible Services Example .................................................................................204

Always Granting Access to an Endpoint .....................................................................................210

Always Quarantining an Endpoint..............................................................................................211

New Users..............................................................................................................................212

Shared Resources ...................................................................................................................212

Untestable Endpoints and DHCP Mode .....................................................................................212

DNS/Windows Domain Authentication and Quarantined Endpoints...............................................213

Chapter 8: High Availability and Load Balancing ........................................................................... 215

High Availability......................................................................................................................215

Load Balancing.......................................................................................................................219

Chapter 9: Inline Quarantine Method ............................................................................................ 221

Chapter 10: DHCP Quarantine Method .......................................................................................... 223

Configuring Sentriant AG for DHCP ...........................................................................................224

Setting up a Quarantine Area..............................................................................................224

Router Configuration .........................................................................................................224

Configuring the Router ACLs ........................................................................................224

Table of Contents

Sentriant AG Users’ Guide, Version 5.0

Configuring Windows Update Service for XP SP2..................................................................225

Chapter 11: 802.1X Quarantine Method........................................................................................ 227

About 802.1X.........................................................................................................................227

Sentriant AG and 802.1X.........................................................................................................228

Setting up the 802.1X Components ..........................................................................................232

Setting up the RADIUS Server ............................................................................................232

Using the Sentriant AG IAS Plug-in to the Microsoft IAS RADIUS Server ..........................232

Configuring the Microsoft IAS RADIUS Server ................................................................234

Proxying RADIUS Requests to an Existing RADIUS Server Using the Built-in Sentriant AG

RADIUS Server ...........................................................................................................258

Using the Built-in Sentriant AG RADIUS Server for Authentication...................................261

Enabling Sentriant AG for 802.1X.......................................................................................261

Sentriant AG Console Configuration...............................................................................261

Setting up the Supplicant ..................................................................................................262

Setting up the Authenticator ..............................................................................................265

Cisco® 2950 IOS........................................................................................................266

Cisco® 4006 CatOS ....................................................................................................267

Enterasys® Matrix 1H582-25 ......................................................................................267

Extreme® Summit 48si ...............................................................................................267

ExtremeWare ..............................................................................................................268

ExtremeXOS................................................................................................................269

Foundry® FastIron® Edge 2402...................................................................................269

HP ProCurve® 420AP .................................................................................................270

HP ProCurve® 530AP .................................................................................................271

HP ProCurve® 3400/3500/5400..................................................................................272

Nortel® 5510.............................................................................................................272

Chapter 12: API........................................................................................................................... 275

Setting Sentriant AG Properties ................................................................................................276

Setting Firewall Rules..............................................................................................................277

Sentriant AG Events Generated.................................................................................................277

Examples of Events Generated............................................................................................278

Java Program and Command for Events ...............................................................................280

Sentriant AG Requests Supported.............................................................................................281

Examples of Requests........................................................................................................281

Java Program and Command for Requests ...........................................................................283

Chapter 13: Reports .................................................................................................................... 285

Generating Reports..................................................................................................................287

Viewing Report Details.............................................................................................................288

Printing Reports......................................................................................................................290

Saving Reports to a File ...........................................................................................................290

Converting an HTML Report to a Word Document .......................................................................290

Chapter 14: System Administration...............................................................................................293

Launching Sentriant AG...........................................................................................................293

Launching and Logging into Sentriant AG ............................................................................293

Logging out of Sentriant AG ...............................................................................................293

Important Browser Settings ................................................................................................293

Table of Contents

Sentriant AG Users’ Guide, Version 5.0 9

Managing your Sentriant AG License .........................................................................................293

Entering a New License Key ...............................................................................................294

Downloading New Tests ...........................................................................................................294

System Settings ......................................................................................................................295

Matching Windows Domain Policies to NAC Policies .............................................................295

Setting the Access Mode....................................................................................................296

Naming your Enforcement Cluster.......................................................................................296

Changing the MS Host Name..............................................................................................296

Changing the ES Host Name ..............................................................................................296

Resetting your System .......................................................................................................297

Changing Properties ..........................................................................................................298

Specifying an Email Server for Sending Notifications............................................................298

Windows 2003 Server Settings ...........................................................................................299

Entering Networks Using CIDR Format ......................................................................................299

Database................................................................................................................................300

Creating a Backup File.......................................................................................................300

Restoring from Backup ......................................................................................................300

Restoring the Original Database..........................................................................................301

Generating a Support Package............................................................................................301

System Requirements..............................................................................................................302

Supported VPNs......................................................................................................................303

Adding Custom Tests...............................................................................................................303

Introduction......................................................................................................................303

References .......................................................................................................................304

Changing the Error Messages in a Test Script.......................................................................304

Creating a Custom Test Class Script from Scratch ................................................................309

BasicTests API..................................................................................................................319

End-user Access Windows........................................................................................................323

How Sentriant AG Handles Static IP Addresses ..........................................................................325

Managing Passwords ...............................................................................................................325

Resetting the Sentriant AG Server Password.........................................................................326

Resetting the Sentriant AG Database Password ....................................................................327

Changing the Sentriant AG Administrator Password ..............................................................327

NTLM 2 Authentication ...........................................................................................................328

Working with Ranges ...............................................................................................................328

Creating and Replacing SSL Certificates....................................................................................330

Creating a New Self-signed Certificate.................................................................................330

Using an SSL Certificate from a known Certificate Authority (CA)...........................................331

Moving an ES from One MS to Another......................................................................................332

Recovering Quickly from a Network Failure ................................................................................333

Appendix A: Requirements ........................................................................................................... 335

Appendix B: Tests Help................................................................................................................ 337

Browser Security Policy—Windows............................................................................................337

Browser Version ................................................................................................................339

Description .................................................................................................................339

Test Properties............................................................................................................339

How Does this Affect Me? ............................................................................................339

What Do I Need to Do? ................................................................................................339

Table of Contents

Sentriant AG Users’ Guide, Version 5.0

Internet Explorer (IE) Internet Security Zone ........................................................................339

Description .................................................................................................................339

Test Properties............................................................................................................339

How Does this Affect Me? ............................................................................................340

What Do I Need to Do? ................................................................................................340

Internet Explorer (IE) Local Intranet Security Zone ...............................................................340

Description .................................................................................................................340

Test Properties............................................................................................................340

How Does this Affect me? ............................................................................................341

What Do I Need to Do? ................................................................................................341

Internet Explorer (IE) Restricted Site Security Zone ..............................................................341

Description .................................................................................................................341

Test Properties............................................................................................................341

How Does this Affect Me? ............................................................................................342

What Do I Need to Do? ................................................................................................342

Internet Explorer (IE) Trusted Sites Security Zone ................................................................342

Description .................................................................................................................342

Test properties ............................................................................................................342

Operating System—Windows ....................................................................................................343

IIS Hotfixes ......................................................................................................................343

Description .................................................................................................................343

Test Properties............................................................................................................343

How Does this Affect Me? ............................................................................................343

What Do I Need to Do? ...............................................................................................343

Internet Explorer Hotfixes ..................................................................................................343

Description .................................................................................................................343

Test Properties............................................................................................................344

How Does this Affect Me? ............................................................................................344

What Do I Need to Do? ...............................................................................................344

MVM Hotfixes ...................................................................................................................344

Description .................................................................................................................344

Test Properties............................................................................................................344

How Does this Affect Me? ............................................................................................344

What Do I Need to Do? ...............................................................................................344

Service Packs ...................................................................................................................344

Description .................................................................................................................344

Test Properties............................................................................................................345

How Does this Affect Me? ............................................................................................345

What Do I Need to Do? ................................................................................................345

Windows 2000 Hotfixes.....................................................................................................345

Description .................................................................................................................345

Test Properties............................................................................................................345

How Does this Affect Me? ............................................................................................345

What Do I Need to Do? ................................................................................................345

Windows Media Player Hotfixes ..........................................................................................345

Description .................................................................................................................345

Test Properties............................................................................................................346

How Does this Affect Me? ............................................................................................346

What Do I Need to Do? ...............................................................................................346

Windows Server 2003 SP1 Hotfixes ....................................................................................346

Description .................................................................................................................346

Test Properties............................................................................................................346

How Does this Affect Me? ............................................................................................346

Andere Handbücher für Sentriant AG200

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Extreme Networks Software Handbücher

Extreme Networks

Extreme Networks IP and Ethernet services Installationsanleitung

Extreme Networks

Extreme Networks EPICenter Guide Bedienungsanleitung

Extreme Networks

Extreme Networks ExtremeXOS ScreenPlay Bedienungsanleitung

Extreme Networks

Extreme Networks ExtremeWare Command Betriebsanleitung

Extreme Networks

Extreme Networks EPICenter 7.1 Job Scheduler Installationsanleitung

Extreme Networks

Extreme Networks ExtremeWare XOS Command Betriebsanleitung

Extreme Networks

Extreme Networks EPICenter 7.1 Job Scheduler Bedienungsanleitung

Extreme Networks

Extreme Networks Ridgeline Guide Bedienungsanleitung

Extreme Networks

Extreme Networks ExtremeWare Command Betriebsanleitung

Extreme Networks

Extreme Networks Summit WMScanner 12.0 Bedienungsanleitung

Extreme Networks

Extreme Networks Identity Manager Installationsanleitung

Extreme Networks

Extreme Networks ExtremeWare Version 7.8 Bedienungsanleitung

Extreme Networks

Extreme Networks ExtremeWare Command Betriebsanleitung

Extreme Networks

Extreme Networks ExtremeWare 7.2e Bedienungsanleitung

Extreme Networks

Extreme Networks EPICenter Guide Bedienungsanleitung

Extreme Networks

Extreme Networks Ridgeline Guide Bedienungsanleitung

Extreme Networks

Extreme Networks Summit WM Series Betriebsanleitung

Extreme Networks

Extreme Networks ExtremeWare Enterprise Manager Bedienungsanleitung

Extreme Networks

Extreme Networks Summit WM20 Bedienungsanleitung

Extreme Networks

Extreme Networks Sentriant AG Sicherheitsleitfaden

Extreme Networks

Extreme Networks ExtremeWare XOS Command Bedienungsanleitung

Extreme Networks

Extreme Networks Ridgeline Guide Bedienungsanleitung

Extreme Networks

Extreme Networks ExtremeWare XOS Command Bedienungsanleitung

Extreme Networks

Extreme Networks ExtremeWare Command Betriebsanleitung

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

HP ProLiant BL420c Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Novell

Novell GROUPWISE 8 - INTERNET AGENT Bedienungsanleitung

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung