HP ProCurve NAC 800, Руководство пользователя

Страница: 281 / 591

NAC Policies
NAC Policy Tasks
6-15
NOTE:
You can use a MAC prefix (one to five bytes or octets) to act on more than
one endpoint at a time. For example entering 00:13 matches all MAC
addresses that begin with 00:13.
2. In the
Windows domains
area, enter a domain name or list of domain names
separated by a carriage return.
3. Click
ok
.
NOTE:
Adding an endpoint or domain to multiple policies results in the endpoint
being assigned to the first enabled NAC policy in the list.
NAC Policy Hierarchy
If an endpoint is listed in more than one NAC policy, the order of use is as
alphabetical by name of NAC policy (not including the default NAC policy).
Setting Retest Time
Retest endpoints connected to your network frequently to guard against
potential changes in the remote endpoint configurations.
To set the time to wait before retesting a connected endpoint:
Home window>>NAC policies>>Select a NAC Policy>>Basic settings menu
option
1. In the
Retest frequency area
, enter how frequently in minutes, hours, or
days NAC 800 should retest a connected endpoint.
TIP:
A lower number ensures higher security, but puts more load on the NAC 800
server.
2. Click
ok
.
Setting Connection Time
When an endpoint is inactive for a period of time, you can elect to automati-
cally move the endpoint to a quarantined state. Quarantining inactive end-
points guards against unauthorized access to the network. When the endpoint
becomes active again, the usual process occurs for moving the endpoint out
of quarantine. For example, if the endpoint was in good standing prior to the