HP ProCurve J9065A Bedienungsanleitung

ProCurve Network Access

Controller 800

Revision 1.0

Quick-start Guide

Central Management

Quick-start Card-2

Central Management

NAC 800 uses clusters and servers. A cluster is a logical grouping of one or

more Enforcement servers (ESs) that are managed by one Management server

(MS).

The quarantine method is defined per cluster; all of the Enforcement servers

in a given cluster use the same quarantine method (Inline, DHCP, or 802.1X).

When using multiple clusters, each cluster can have a different quarantine

method. Clusters cooperate to test and control access to the network.

Physical Deployment

NAC 800 installs in one of the following ways:

■Inline – When deploying NAC 800 inline, NAC 800 monitors and

enforces all device traffic. When NAC 800 is deployed as a single-

server installation, NAC 800 becomes a Layer 2 bridge that requires

no changes to the network configuration settings. When NAC 800 is

installed in a multiple-server installation, you might have to configure

the switch that connects the NAC 800 enforcement servers to use

Spanning Tree Protocol (STP) if STP is not already configured.

NAC 800 allows devices to access the network or blocks devices from

accessing the network based on their Internet Protocol (IP) address

with a built-in firewall (iptables).

■DHCP – When deploying NAC 800 inline with a Dynamic Host Config-

uration Protocol (DHCP) server, all DHCP requests pass through the

NAC 800 server(s) Layer 2 bridge. For a quarantined device, NAC 800

distributes the quarantined IP address for the device. If NAC 800

allows the device to have access, NAC 800 allows your real DHCP

server to distribute a non-quarantined IP address. NAC 800 assigns a

DHCP IP address based on the quarantine area parameters you define

during configuration. You can place restrictions on network access

either at the gateway for the device using Access Control Lists (ACLs),

or on the device by removing the device's gateway and adding static

routes for accessible networks.

■802.1X– When deploying NAC 800 in an 802.1Xenvironment, you must

install it where it can communicate with the Remote Authentication

Dial-In User Service (RADIUS) server (or, NAC 800 has a built-in

Ethernet Information

Quick-start Card-3

RADIUS server that you can use). The RADIUS server communicates

with the switch, which performs the quarantining by moving ports or

MAC addresses in and out of virtual local area networks (VLANs).

Ethernet Information

The Ethernet interfaces should be attached as follows:

■Ethernet Port1 – Connect to the corporate LAN (the internal network

side)

■Ethernet Port2 – Connect to a switch, VPN, or DHCP server (the

Internet or endpoint side)

Port Information

You might need to configure some firewalls and routers to allow NAC 800 to

access the following ports for testing:

■Agentless test method – 137, 138, 139, and 445

■ActiveX and agent-based test method – 1500

■License validation and test updates – update.hp.com port 443

■Software and operating system updates – download.hp.com port 80

User Documents

The following user documents are available at www.procurve.com/nactools:

1. ProCurve Network Access Controller 800 Hardware Installation Guide

– Refer to this document first to see how to prepare for and perform the

physical installation of the appliance and how to establish initial

management access. This document contains appliance specifications,

safety information, and appliance certifications.

2. ProCurve Network Access Controller 800 Configuration Guide – Refer

to this document second, to understand the product's features,

capabilities, and use. This document explains how to configure the

appliance based on the usage model you choose to deploy in your

network.

Updates and Upgrades

Quick-start Card-4

3. ProCurve Network Access Controller 800Users’ Guide – Refer to this

document last for information on configuring, monitoring activities,

creating NAC policies, and running reports.

Updates and Upgrades

See the ProCurve Network Access Controller 800 Configuration Guide for

information on updates and upgrades.

Getting Support

ProCurve prides itself on providing exceptional customer support.

See Technical support – www.procurve.com

Hewlett-Packard Company

8000 Foothills Boulevard, m/s 5551

Roseville, California 95747-5551

http://www.hp.com/go/hpprocurve

© Copyright 2007Hewlett-Packard Development Company, L.P. All Rights Reserved.

Inhaltsverzeichnis

Andere HP Netzwerk-Router Handbücher

HP

HP HP ProCurve Series 6600 Bedienungsanleitung

HP

HP SCSI-Fibre Channel Router Bedienungsanleitung

HP

HP 10500 series Bedienungsanleitung

HP

HP MSR2000 Series Bedienungsanleitung

HP

HP VSR1000 Installationshandbuch

HP

HP A5500 EI Switch Series Installationshandbuch

HP

HP A8800 Series Bedienungsanleitung

HP

HP MSR SERIES Bedienungsanleitung

HP

HP FlexNetwork MSR2003 Bedienungsanleitung

HP

HP MSR SERIES Bedienungsanleitung

HP

HP StorageWorks MPX200 Programmierhandbuch

HP

HP A-MSR900 Series Montageanleitung

HP

HP FlexNetwork MSR2003 Bedienungsanleitung

HP

HP FlexNetwork HSR6600 Installationshandbuch

HP

HP IntelliJack NJ1000G Bedienungsanleitung

HP

HP StorageWorks SR2122 Bedienungsanleitung

HP

HP A-MSR20 Bedienungsanleitung

HP

HP ISCSI SR2122 Bedienungsanleitung

HP

HP MSR4080 Bedienungsanleitung

HP

HP FlexNetwork MSR3012 Bedienungsanleitung

HP

HP 12500 Series Bedienungsanleitung

HP

HP Series 200 Benutzerhandbuch

HP

HP A8800 Series Installationshandbuch

HP

HP A-MSR30-16 Montageanleitung

Beliebte Netzwerk-Router Handbücher anderer Marken

Allnet

Allnet ALL0333AU Bedienungsanleitung

HomeSeer

HomeSeer HT-SEL Bedienungsanleitung

Sercomm

Sercomm Genesis OC3505D Bedienungsanleitung

Billion

Billion BIPAC 5102 Series Bedienungsanleitung

TP-Link

TP-Link TD-8817 Bedienungsanleitung

Motorola

Motorola MR1900 Bedienungsanleitung

Digi

Digi IX14 Bedienungsanleitung

Cisco

Cisco NCS 540 Handbuch

XAVi

XAVi X8821e Bedienungsanleitung

BEC

BEC 6200WZL Bedienungsanleitung

MikroTik

MikroTik hAP ac3 Series Bedienungsanleitung

Korenix

Korenix JetNet 5428G Series Bedienungsanleitung

NETGEAR

NETGEAR FS526T - Switch Bedienungsanleitung

Korenix

Korenix JetNet 5710G Series Bedienungsanleitung

Automated Logic

Automated Logic ZN551 Betriebsanleitung

Cisco

Cisco ASR 1000 Series Bedienerhandbuch

EnGenius

EnGenius ESR-9710 Bedienungsanleitung

Cisco

Cisco 805 Series Bedienungs- und Sicherheitshinweise