Enterasys-networks 9034385 Manuel d'utilisateur Page 66

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 98
  • Table des matières
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 65
Procedures for Out-of-Band and Inline NAC
5-2 Design Procedures
PolicyManagerisnotrequiredforoutofbandNACthatutilizesRFC3580compliantswitches
(Enterasysandthirdpartyswitches).Inthiscase,aVLANisspecifiedinNACManagerto
authorizeconnectingendsystemswithaparticularlevelofnetworkaccess,usingdynamicVLAN
assignment.
RefertotheEnterasys
Networkswebsitehttp://www.enterasys.com/products/management/
downloads/NetSight.htmlforNetSightsoftwarelicensinganddownloadinformation.
2. Define Network Security Domains
AdifferentSecurityDomainshouldbedefinedforeachareaofthenetworkthathasitsown
uniquerequirementsforendsystemauthentication,assessment,andauthorization.
ASecurityDomaindefinesasetofNACGatewaysandNACControllersthathavecommon
authentication,assessment,andauthorizationrequirementsforendsystemsconnectingto
the
network.ForNACGateways,thedomainalsoincludestheassociatedswitchesthatareuniquely
assignedtothegateways.
ASecurityDomaincanbecomposedofbothNACControllerandNACGatewayappliances.Each
NACGatewaycanonlybeassignedtooneSecurityDomainandthereforeallportsonaparticular
switch(forexample,astackofSecureStackC2switchesoraMatrixN7chassis)canonlybe
associatedtooneSecurityDomain.Likewise,aNACControllercanonlybeassignedtoone
SecurityDomain.
Vue de la page 65
1 2 ... 61 62 63 64 65 66 67 68 69 70 71 ... 97 98

Commentaires sur ces manuels

Pas de commentaire