Operation Manual - Security
Quidway S3500 Series Ethernet Switches
Chapter 4 EAD Configuration
Huawei Technologies Proprietary
4-2
Client
Authentication server
Security policy server
Virus patch server
Figure 4-1
EAD network application
After a user client passes the authentication, the security client (software installed on
the client PC) checks the security condition of the user client and interacts with the
security policy server. If its security condition is unqualified, the security policy server
delivers an ACL packet to let the switch only allow the user client to access the virus
patch server.
When the user client is installed with the virus patches and its security condition
becomes qualified, the security condition information is then sent to the security policy
server, which delivers an ACL packet to let the switch enable the access right of the
user client. The user client can then access more network resources.
4.3 EAD Configuration Tasks
Table 4-1
EAD configuration tasks
Configuration step
Command
Description
Enter system view
system-view
––
Enter RADIUS scheme
view
radius scheme
radius-scheme-name
––
Configure IP address for
the security policy server
session-control-server
ip-address
In a RADIUS scheme,
you can configure up to
eight security policy
servers with different IP
addresses.