Enterasys-networks 9034385 Instrukcja Użytkownika Strona 55

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
  • Strona
    / 98
  • Spis treści
  • BOOKMARKI
  • Oceniono. / 5. Na podstawie oceny klientów
Przeglądanie stron 54
Survey the Network
Enterasys NAC Design Guide 4-3
ThenetworkshowninFigure 41below,illustratesthefollowingthreeexamplesofhowthe
intelligentedgecanbeimplementedinanetwork.
PolicyenabledEnterasysdevicesatthephysicaledgeofthenetwork.
TheSecureStackB2/B3,SecureStackC2/C3,andMatrixNseriesswitchesaretheintelligent
edgeofthenetwork
aswellasthephysicaledgeofthenetwork.Thesepolicyenableddevices
provideauthenticationandauthorizationviapolicyenforcementtotheconnectingend
systems.
•ThirdpartyswitchesthatsupportRFC3580withdynamicVLANassignmentatthe
physicaledgeofthenetwork.
RFC3580compliantswitches(Enterasysandthirdparty),
arealsopartoftheintelligentedge
ofthenetwork,becausetheyareabletoauthenticateandauthorizeconnectingendsystems
withaparticularlevelofnetworkaccess,usingdynamicVLANassignment.
•PolicyenabledEnterasysdevicesatthedistributionlayerofthenetwork,upstreamfrom
nonintelligentthirdpartydevices.
Theintelligent
edgeofthenetworkmayormaynotbethephysicaledgeofthenetworkwhere
endsystemsactuallyconnect.TheMatrixNseriesswitchinthedistributionlayerofthe
network,upstreamfromthenonintelligentthirdpartydevice,isalsoconsideredpartofthe
intelligentedgeofthe
network.ThisisbecausetheMatrixNseriesswitchcanindividually
authenticateanduniquelyallocatenetworkresourcesfortheendsystemsconnected
downstreamtothenonintelligentthirdpartyaccesslayerdevice.
Figure 4-1 Network with Intelligent Edge
Przeglądanie stron 54
1 2 ... 50 51 52 53 54 55 56 57 58 59 60 ... 97 98

Komentarze do niniejszej Instrukcji

Brak uwag