HP 800 Series, User Manual

Page: 353 / 586

802.1X Quarantine Method
Setting up the 802.1X Components
11-39
Enabling NAC 800 for 802.1X
To enable NAC 800 for use in an 802.1X network, you need to select it in the
user interface, and make a few changes to the properties using JMS and an
XML file.
NAC 800 User Interface Configuration
To enable 802.1X in the NAC 800 user interface:
Home window>>System configuration>>Quarantining
1. In the
Select a quarantine method
area, select the
802.1X
quarantine method
radio button.
2. In 802.1X enforcement mode, the ESs must be able watch DHCP
conversations and detect endpoints by sniffing network traffic as it flows
between the DHCP server and the endpoints. Select one of the following
radio buttons:
•
remote
– In more complex deployments, it is often impossible (in the
case of multiple ESs or multiple DHCP servers) or undesirable to span
switch ports. In this case the DHCP traffic monitoring and endpoint
#
#"<POSTURE>RadiusAttributes-<NAS IP ADDRESS>"
#
Tunnel-Medium-Type := 6,
# Tunnel-Private-Group-ID := 15,
# Tunnel-Type := VLAN,
Figure 11-31. Enabling 802.1X in the User Interface