ProCurve 800, Configuration Manual, Page: 43 / 406

1-31
Overview of the ProCurve NAC 800
RADIUS Server
ProCurve NAC 800 RADIUS Capabilities
The ProCurve NAC 800 supports the following RADIUS capabilities:
■
Authenticating users against accounts stored in a variety of locations,
including:
• Windows domain controllers (Active Directory [AD])
• An OpenLDAP server
• An eDirectory server
• Another RADIUS server (proxying requests)
■
Authenticating users with a variety of protocols, including:
• Extensible Authentication Protocol (EAP):
–
Protected EAP (PEAP) with Microsoft CHAP version 2
(MS-CHAPv2)
– Transport Layer Security (TLS)
– Tunneled TLS (TTLS) with Message Digest 5 (MD5)
– Generic Token Card (GTC)
– Lightweight EAP (LEAP)
■
Granting users rights, as follows:
• Assigning users to a VLAN based on their endpoint integrity posture
■
Logging activity
The NAC 800 logs RADIUS events to this file: /var/log/radius/radius.log .
By default, the file stores a week’s worth of logs. Every month, the NAC
creates a new log file, and it saves up to four files.
RADIUS logs include:
• Failed authentication attempts
• Successful authentication attempts
• Authentication requests from unknown NASs
■
Accounting
The NAC 800 can also act as a RADIUS accounting server. RADIUS
accounting reports are logged as files in this directory:
/var/log/radius/
radacct .