HP 800 Series, User Manual

Page: 554 / 586

Ports used in NAC 800
E-4
Ports used for re-authentication:
22 (TCP)
23 (TCP)
161 (TCP) ES to switch Used when you select the
test
connection to device
button, and
when an endpoint is re-authenticated
by the switch. (SSH)
NAC 800 user interface:
System configuration
>>Quarantining
>>802.1X Quarantine method
>>Add 802.1X device
>>Select any device type
>>Select the SSH Connection method
Not configurable
1812 (TCP) Switch to ES Used to relay credentials to RADIUS
when you are using the local RADIUS
server. Not configurable
Ports used for DHCP and domain controllers:
88 (TCP)
135
-
159 (TCP)
135-159 (UDP)
389 (TCP)
1025 (TCP)
1026 (TCP)
3268 (TCP)
ES to DC/DHCP
server DHCP Server and Domain Controller
behind NAC 800:
In DHCP mode, when your DHCP server
and Domain Controller are behind NAC
800, you must specify ports 88, 135 to
159, 389, 1025, 1026, and 3268 as part of
the address. If you do not specify a
DHCP address, users are blocked. If
you specify only the IP address with no
port, endpoints are not quarantined,
even for failed tests. Configure in the NAC 800 user
interface:
Home window
>>System configuration
>>Accessible services
88 (TCP)
135
-
159 (TCP)
135-159 (UDP)
389 (TCP)
1025 (TCP)
1026 (TCP)
3268 (TCP)
MS/ES to DC/
DHCP server DHCP Server and Domain Controller
NOT behind NAC 800:
In DHCP mode, if your domain
controller is not situated behind NAC
800, you must configure your router to
allow routes from the quarantine area
to your domain controller on ports 88,
135-159, 389, 1025, 1026, and 3268. Configure on the router between
Domain Controller and Quarantine
Area
Port Parties Description Comments
Table E-1. Ports in NAC 800 (cont.)