HP ProCurve NAC 800, Руководство пользователя

Страница: 561 / 591

Ports used in NAC 800
E-5
Ports used for accessible services and endpoints:
Varies ES to endpoint In order to grant access for
quarantined endpoints to needed
services, add entries to the Accessible
services list.
For inline enforcement mode, enter the
IP addresses of the servers that
provide the services. A port or ports
can be added to limit the access to the
servers from quarantined endpoints.
For all other deployment modes, the
Fully Qualified Domain Name (FQDN) of
the target servers should be added to
the list (for example mycompany.com).
If the specified accessible servers are
not behind an ES, a network firewall
must be used to control access to only
the desired ports.
In DHCP mode, if your DHCP server has
other services besides DHCP for which
you need to allow access, be sure to
NOT allow port 67.
For example, add the entries
192.168.1.1:1:66 and
192.168.1.1:68:65535 to open all ports
besides 67. Configure in the NAC 800 user
interface:
Home window>>System
configuration>>Accessible
services
Example:
10.0.16.100:53
Separate multiple endpoint entries
with a carriage return (new line):
10.0.16.100:53
10.0.16.100:80
10.0.16.100:81
10.0.16.100:82
Enter a range of ports as follows:
10.0.16.100:53:65
Ports used for SNMPD:
161 (UDP) admin user to MS
or ES Used for SNMP monitoring of the
server.
NOTE: See “Enabling SNMP” on page
3-28 for instructions on enabling
SNMP. Not Configurable
162 (UDP/TCP) MS to SNMP Traps for SNMP Not configurable
Port Parties Description Comments
Table E-1. Ports in NAC 800 (cont.)