HP ProCurve NAC 800, User Manual

Page: 102 / 591

System Configuration
Quarantining, 802.1X
3-54
Quarantining, 802.1X
The 802.1X quarantine (enforcement) method is enabled by default.
To select the 802.1X quarantine method:
Home window>>System configuration>>Quarantining
1. Select a cluster.
2. In the
Quarantine method
area, select the 802.1X radio button.
3. Click ok .
Entering Basic 802.1X Settings
To enter basic 802.1X settings:
Home window>>System configuration>>Quarantining>>802.1X quarantine
method radio button
1. Enter an IP address in the Identity Driven Manager ( IDM ) server IP address
text field.
• remote – Disables the local RADIUS server so that an IAS server config-
ured with the NAC IAS plug-in to point to an enforcement server can be
used instead. When possible, a local RADIUS server that proxies to the IAS
server should be the preferred configuration.
2. Enter one or more non-quarantined subnets, separated by commas in the
Quarantine subnets
text field. All subnets should be entered using CIDR
addresses.
3. Select a
RADIUS server type
by selecting one of the following radio buttons:
• Local – Enables a local RADIUS server on the ES which can be
configured to perform authentication itself or proxy to another server.
• Remote IAS – Disables the local RADIUS server so that an IAS server
configured with the NAC IAS plug-in to point to an ES can be used
instead. When possible, a local RADIUS server that proxies to the IAS
server should be the preferred configuration.
4. Click
ok
.