background image

Introduction 

The H3C MSR3610-I iMC EAD End-user Admission Defense Gateway (referred to as the EAD 
gateway hereinafter) can cooperate with access services (for example, L2TP, 802.1X, and portal) to 
achieve the following purposes: 

 

Ensure endpoint access security. 

 

Prevent endpoints from network threats. 

 

Control endpoints' network access behaviors. 

To improve the high availability of authentication data, the EAD gateway is built with two 
SIC-M2-SATA drives operating in RAID 1 mode. 

The EAD gateway is shipped with a VM that runs the CentOS operating system. The VM is installed 
with IMC software and EAD components by default, and it has been assigned an SR-IOV NIC with 
an IP address. 

Factory defaults 

Interfaces 

The EAD gateway provides the following interfaces by default: 

 

Layer 3 Ethernet combo interfaces GigabitEthernet 0/0 and GigabitEthernet 0/1. 

 

Layer 2 Ethernet copper interfaces GigabitEthernet 0/2 to GigabitEthernet 0/8, in which 
GigabitEthernet 0/8 is an internal interface used to connect the SR-IOV NIC of the VM. 

Figure 1 

shows the interfaces on the EAD gateway. 

Figure 1 Interface network diagram 

 

 

Содержание MSR3610-I iMC EAD

Страница 1: ...H3C MSR3610 I iMC EAD End user Admission Defense Gateway VM Deployment Guide New H3C Technologies Co Ltd http www h3c com Software version MSR CMW710 E0809 Document version 5W100 20200619...

Страница 2: ...H3C Technologies Co Ltd any trademarks that may be mentioned in this document are the property of their respective owners Notice The information in this document is subject to change without notice A...

Страница 3: ...ommand conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown Italic Italic text represents arguments that you replace with actual val...

Страница 4: ...at contains additional or supplementary information TIP An alert that provides helpful information Network topology icons Convention Description Represents a generic network device such as a router sw...

Страница 5: ...document might use devices that differ from your device in hardware model configuration or software version It is normal that the port numbers sample output screenshots and other information in the e...

Страница 6: ...twork settings 9 Configuring the EAD gateway through IMC 11 About EAD gateway configuration through IMC 11 Displaying IMC service running status 11 Example Deploying the EAD gateway in a network 13 Co...

Страница 7: ...erating in RAID 1 mode The EAD gateway is shipped with a VM that runs the CentOS operating system The VM is installed with IMC software and EAD components by default and it has been assigned an SR IOV...

Страница 8: ...ss of the VM is 10 1 1 2 30 and the default gateway is 10 1 1 1 The IP address of VLAN interface 1 is 192 168 0 1 23 The IP address of VLAN interface 4094 is 10 1 1 1 30 VM login method To use a manag...

Страница 9: ...reconfigure an IP address for the VM NIC according to the user network configuration Service data interaction modes of the VM The EAD gateway provides the following service data interaction modes for...

Страница 10: ...e VLAN interface to an IP address reachable to the client hosts and specify the default gateway of the VM as the IP address of the VLAN interface The client hosts interact with the VM through a Layer...

Страница 11: ...paring a management host and tool software Prepare a management host used to log in to the VM on the EAD gateway Prepare a serial cable and a network cable to connect the management host and the EAD g...

Страница 12: ...nagement host Automatic IP address assignment By default DHCP is enabled on the EAD gateway If the management host chooses to dynamically obtain an IP address the EAD gateway randomly assigns an IP ad...

Страница 13: ...n the VM name and VNC port number and view the VM status By default the VM name on the EAD gateway is EAD_VM and the VNC port number is 98 Obtaining the VM name and VM status Log in to the CLI of the...

Страница 14: ...open VNC Viewer and connect to the desktop of the VM by using the VNC server in the format of VNC server IP address VNC port number as shown in Figure 9 Figure 9 VNC Viewer login interface 2 If VNC Vi...

Страница 15: ...nter the password to log in to the VM operating system Figure 11 Logging in to the VM operating system Configuring VM network settings About this task By default the VM IP address is 10 1 1 2 30 and t...

Страница 16: ...wired connection 3 Click the gear icon as shown in Figure 13 Figure 13 Opening the network setting configuration page 4 Configure IP address settings for the VM as shown in Figure 14 Figure 14 Configu...

Страница 17: ...or the H3C Intelligent Management Center in the network management section of technical documents on H3C websites Displaying IMC service running status The IMC services installed on the VM of the EAD...

Страница 18: ...rvices 3 Click the Process and Deploy tabs to view the status of the IMC service processes and the deployment status of the EAD component respectively as shown in Figure 17 and Figure 18 Figure 17 IMC...

Страница 19: ...Figure 19 configure the EAD gateway to control the access behaviors of Device A Device B and Device C Device A Device B and Device C access Layer 2 Ethernet interface GigabitEthernet 0 2 on the EAD ga...

Страница 20: ...92 168 0 4 23 and 192 168 0 5 23 respectively Configure their default gateway as 192 168 0 1 Details not shown Verifying the configuration 1 Verify that the management host can ping the VM on the EAD...

Страница 21: ...rives have been configured to operate in RAID 1 mode The drive name of the RAID is md0 No manual configuration is required If reconfiguring the RAID is required you must follow the restrictions and gu...

Страница 22: ...view set the number of partitions to 1 for hard disks hdb and hdc H3C fdisk hdb 1 H3C fdisk hdc 1 2 Set the file system format to EXT4 for hard disks hdb0 and hdc0 H3C format hdb0 ext4 H3C format hdc...

Страница 23: ...ocedure 1 Enter RAID view H3C system view H3C raid H3C raid 2 Remove RAID 1 H3C raid remove raid md0 Displaying RAID status information Display RAID status information H3C display raid status Name Lev...

Страница 24: ...ou restart the VM If you enable or disable VM auto start when the VM is stopped the configuration will take effect after you start the VM Procedure 1 Enter VMM view H3C system view H3C vmm 2 Enable VM...

Страница 25: ...eway Procedure 1 Enter VMM view H3C system view H3C vmm 2 Export the VM to file md0 EAD_VM pkg H3C vmm export vm EAD_VM md0 EAD_VM pkg Uninstalling the VM Restrictions and guidelines Perform this task...

Страница 26: ...parameters for the VM and the related commands see the following manuals VM configuration in Virtual Technologies Configuration Guide of H3C MSR810 2600 3600 Routers Configuration Guides VM commands...

Страница 27: ...t vm vm name Display the bindings between vCPUs and physical CPUs display vmcpupin vm vm name Display VM disk usage information display vmdisk usage vm vm name Display physical NIC information display...

Отзывы: