Enterasys-networks 9034385 Instrukcja Użytkownika Strona 66

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
  • Strona
    / 98
  • Spis treści
  • BOOKMARKI
  • Oceniono. / 5. Na podstawie oceny klientów
Przeglądanie stron 65
Procedures for Out-of-Band and Inline NAC
5-2 Design Procedures
PolicyManagerisnotrequiredforoutofbandNACthatutilizesRFC3580compliantswitches
(Enterasysandthirdpartyswitches).Inthiscase,aVLANisspecifiedinNACManagerto
authorizeconnectingendsystemswithaparticularlevelofnetworkaccess,usingdynamicVLAN
assignment.
RefertotheEnterasys
Networkswebsitehttp://www.enterasys.com/products/management/
downloads/NetSight.htmlforNetSightsoftwarelicensinganddownloadinformation.
2. Define Network Security Domains
AdifferentSecurityDomainshouldbedefinedforeachareaofthenetworkthathasitsown
uniquerequirementsforendsystemauthentication,assessment,andauthorization.
ASecurityDomaindefinesasetofNACGatewaysandNACControllersthathavecommon
authentication,assessment,andauthorizationrequirementsforendsystemsconnectingto
the
network.ForNACGateways,thedomainalsoincludestheassociatedswitchesthatareuniquely
assignedtothegateways.
ASecurityDomaincanbecomposedofbothNACControllerandNACGatewayappliances.Each
NACGatewaycanonlybeassignedtooneSecurityDomainandthereforeallportsonaparticular
switch(forexample,astackofSecureStackC2switchesoraMatrixN7chassis)canonlybe
associatedtooneSecurityDomain.Likewise,aNACControllercanonlybeassignedtoone
SecurityDomain.
Przeglądanie stron 65
1 2 ... 61 62 63 64 65 66 67 68 69 70 71 ... 97 98

Komentarze do niniejszej Instrukcji

Brak uwag