Novell ZENWORKS NETWORK ACCESS CONTROL 5.0 - INSTALLATION GUIDE... Bedienungsanleitung

Novell®

www.novell.com

novdocx (en) 24 March 2009

AUTHORIZED DOCUMENTATION

Novell ZENworks Network Access Control Installation Guide

ZENworks

Network Access Control

5.0

September 22, 2008

Installation Guide

novdocx (en) 24 March 2009

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the

Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on

exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export

approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see

the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 24 March 2009

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

This Novell software product includes open-source software components. Novell conforms to the terms and

conditions that govern the use of the open source components included in this product. Users of this product have

the right to access the open source code and view all applicable terms and conditions governing opens source

component usage. Visit http://www.novell.com/products/zenworks/networkaccesscontrol/opensource to access

open source code, applicable terms and conditions, and related information.

4Novell ZENworks Network Access Control Installation Guide

novdocx (en) 24 March 2009

Contents 5

Contents

novdocx (en) 24 March 2009

What You Need to Get Started 7

1 Deployment Flexibility 9

1.1 Deploying Novell ZENworks Network Access Control Inline . . . . . . . . . . . . . . . . . . . . . . . . . . 11

1.2 Deploying Novell ZENworks Network Access Control Using DHCP . . . . . . . . . . . . . . . . . . . . 12

1.3 Deploying Novell ZENworks Network Access Control Using 802.1X. . . . . . . . . . . . . . . . . . . . 15

1.4 Installing the Network Interface Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.4.1 Inline . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.4.2 DHCP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.4.3 802.1X . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.4.4 Determining eth0 and eth1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.5 Deploying Novell ZENworks Network Access Control in VPN Mode on a Different Network . 19

2 System Requirements 23

2.1 General System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

2.2 Important Browser Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

2.2.1 Pop-up Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

2.2.2 Active Content . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

2.2.3 Minimum Font Size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

2.2.4 Page Caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

2.2.5 Temporary Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

3 Installing Novell ZENworks Network Access Control 31

3.1 Installing Novell ZENworks Network Access Control for the First Time . . . . . . . . . . . . . . . . . . 31

3.1.1 Downloading the New Install ISO Image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

3.1.2 Creating the Installation CD from the Novell ZENworks Network Access Control

Download. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

3.1.3 Installing Novell ZENworks Network Access Control. . . . . . . . . . . . . . . . . . . . . . . . . 33

4 Configuring Novell ZENworks Network Access Control 53

A Installation and Configuration Check List 55

A.1 Minimum System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

A.2 Installation Location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

A.3 Installation Media . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

A.4 IP Addresses, Hostname, Logins, and Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

A.4.1 Single-server Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

A.4.2 Multiple-server Installations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

A.4.3 Proxy Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

A.5 Agentless Credentials . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

A.6 Quarantine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

A.6.1 802.1X . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

A.6.2 802.1X Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

A.6.3 DHCP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

A.6.4 Accessible services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

A.7 Notifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

6Novell ZENworks Network Access Control Installation Guide

novdocx (en) 24 March 2009

A.8 Test Exceptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

What You Need to Get Started 7

novdocx (en) 24 March 2009

What You Need to Get Started

You need the following prior to installing and running Novell®ZENworks®Network Access

Control:

Minimum system (hardware and software) requirements – See Chapter 2, “System

Requirements,” on page 23

IP addresses you will enter during the set up process – See Appendix A, “Installation and

Configuration Check List,” on page 55

Install CD – See Chapter 3, “Installing Novell ZENworks Network Access Control,” on

page 31

This Installation Guide helps you install and set up Novell ZENworks Network Access Control. The

Novell ZENworks Network Access Control Users Guide (available on the CD in the /docs

directory and through the online help links in Novell ZENworks Network Access Control) provides

Novell ZENworks Network Access Control configuration information and task-based instructions.

8Novell ZENworks Network Access Control Installation Guide

novdocx (en) 24 March 2009

Deployment Flexibility

novdocx (en) 24 March 2009

Deployment Flexibility

Novell®ZENworks®Network Access Control v5.0 allows you to deploy multiple Enforcement

servers (ESs) across a network and manage them from one central Management server (MS). You

create logical groups of ESs by joining them to an Enforcement cluster.

The Novell ZENworks Network Access Control MS specifies many aspects of the Enforcement

clusters; for example, the MS specifies the enforcement method (inline, DHCP, or 802.1X), how

often the endpoints are retested, the tests run on the endpoints, and how to control the endpoints’

access.

The Novell ZENworks Network Access Control ESs detect and test endpoints on the network for

compliance.

You can deploy each Novell ZENworks Network Access Control cluster in one of the following

configurations:

Inline — When deploying Novell ZENworks Network Access Control inline, Novell

ZENworks Network Access Control monitors and enforces all endpoint traffic. When Novell

ZENworks Network Access Control is deployed as a single-server installation, Novell

ZENworks Network Access Control becomes a Layer 2 bridge that requires no changes to the

network configuration settings. When Novell ZENworks Network Access Control is installed

in a multiple-server installation, you might have to configure the switch that connects the

Novell ZENworks Network Access Control Enforcement servers to use Spanning Tree

Protocol (STP) if STP is not already configured. Novell ZENworks Network Access Control

allows endpoints to access the network or blocks endpoints from accessing the network based

on their Internet Protocol (IP) address with a built-in firewall (iptables).

DHCP — When deploying Novell ZENworks Network Access Control inline with a Dynamic

Host Configuration Protocol (DHCP) server, all DHCP requests pass through the Novell

ZENworks Network Access Control server Layer 2 bridge. For a quarantined endpoint, Novell

ZENworks Network Access Control distributes the quarantined IP address for the endpoint. If

Novell ZENworks Network Access Control allows the endpoint to have access, Novell

ZENworks Network Access Control allows your real DHCP server to distribute a non-

quarantined IP address. Novell ZENworks Network Access Control assigns a DHCP IP address

based on the quarantine area parameters you define during configuration. You can place

restrictions on network access either at the gateway for the endpoint using Access Control Lists

(ACLs), or on the endpoint by removing the endpoint’s gateway and adding static routes for

accessible networks.

802.1X — When deploying Novell ZENworks Network Access Control in an 802.1X

environment, you must install it where it can communicate with the Remote Authentication

Dial-In User Service (RADIUS) server (or, Novell ZENworks Network Access Control has a

built-in RADIUS server that you can use). The RADIUS server communicates with the switch,

which performs the quarantining by moving ports or MAC addresses in and out of virtual local

area networks (VLANs).

10 Novell ZENworks Network Access Control Installation Guide

novdocx (en) 24 March 2009

The following figures illustrate various deployment methods:

Figure 1-1 Single-server Installation, Quarantine Method, Inline

Figure 1-2 Multiple-server Installation, Quarantine Method, Inline

Figure 1-3 Single-server Installation, Quarantine Method, DHCP, Flat Network

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Novell Software Handbücher

Novell

Novell ZENWORKS APPLICATION VIRTUALIZATION - V8.0.3 INTEGRATION AND STREAMING... Bedienungsanleitung

Novell

Novell ACCESS MANAGER 3.1 SP2 IR1 - README 07-2010 Bedienungsanleitung

Novell

Novell SENTINEL RAPID DEPLOYMENT 6.1 - 12-2009 Bedienungsanleitung

Novell

Novell CLIENT FOR LINUX 2.0 SP1 - ADMINISTRATION Bedienungsanleitung

Novell

Novell IMANAGER 2.7.3 Bedienungsanleitung

Novell

Novell OPEN ENTERPRISE SERVER - CONVERSION GUIDE... Bedienungsanleitung

Novell

Novell LINUX ENTERPRISE SERVER 10 - ARCHITECTURE-SPECIFIC INFORMATION... Handbuch

Novell

Novell LINUX ENTERPRISE REAL TIME 10 SP1 Bedienungsanleitung

Novell

Novell ZENWORKS APPLICATION VIRTUALIZATION - V8.0.3 INTEGRATION AND STREAMING... Bedienungsanleitung

Novell

Novell ZENWORKS PATCH MANAGEMENT 6.4 SP2 - SERVER Bedienungsanleitung

Novell

Novell DATA SYNCHRONIZER - 07-2010 Bedienungsanleitung

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - PREBOOT SERVICES AND IMAGING REFERENCE 10.3... Bedienungsanleitung

Novell

Novell CLIENT LOGIN EXTENSION 3.7 - ADMINISTRATION Bedienungsanleitung

Novell

Novell LINUX ENTERPRISE DESKTOP 11 - ADMINISTRATION GUIDE... Kurzanleitung

Novell

Novell LINUX ENTERPRISE SERVER 10 SP2 - ARCHITECTURE-SPECIFIC INFORMATION... Bedienungsanleitung

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Kurzanleitung

Novell

Novell APPARMOR - AND Datenblatt

Novell

Novell LINUX ENTERPRISE SERVER 10 SP2 - STORAGE ADMINISTRATION GUIDE... Bedienungsanleitung

Novell

Novell LINUX ENTERPRISE SERVER 10 - STORAGE ADMINISTRATION GUIDE FOR... Bedienungsanleitung

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.0 -... Bedienungsanleitung

Novell

Novell ACCESS MANAGER 3.1 SP2 - SSL VPN USER GUIDE... Bedienungsanleitung

Novell

Novell IDENTITY MANAGER ENTITLEMENTS SERVICE DRIVER 3.6.1 -... Bedienungsanleitung

Novell

Novell eBook Reader Bedienungsanleitung

Novell

Novell GROUPWISE 7 ASYNC GATEWAY - INSTALLATION AND... Bedienungsanleitung

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

HP ProLiant BL420c Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung

Lexmark

Lexmark Apps Service-Handbuch