Novell ZENworks Network Access Control 5.0, Руководство пользователя

Страница: 72 / 534

72 Novell ZENworks Network Access Control Users Guide
no
vd
ocx
(e
n)
24
Ma
rch 20
09
2 In the
Quarantine method
area, select one of the following quarantine methods:
Š
802.1X — When using the 802.1X quarantine method, Novell ZENworks Network
Access Control must sit in a place on the network where it can communicate with your
RADIUS server, which communicates with your switch or router, which performs the
quarantining.
Š DHCP — When configured with a DHCP quarantine area, Novell ZENworks Network
Access Control must sit inline with your DHCP server. All endpoints requesting a DHCP
IP address are issued a temporary address on a quarantine subnetwork. Once the endpoint
is allowed access, the IP address is renewed, and the main DHCP server assigns an
address to the main LAN. With a multiple subnetwork or VLAN network, one quarantine
area must be configured for each subnetwork. See
Chapter 13, “Remote Device Activity
Capture,” on page 295 for information on using multiple DHCP servers.
Š Inline — When using the inline quarantine method, Novell ZENworks Network Access
Control must be placed on the network where all traffic to be quarantined passes through
Novell ZENworks Network Access Control. It must be inline with an endpoint like a
VPN.
3 Click
ok
.
3.10.2 Selecting the Access Mode
To select the access mode:
Home window>>System configuration>>Quarantining
1 Select one of the following in the
Access mode
area:
Š
normal — Either allows or quarantines endpoints depending on the setup of the
enforcement sever.
Š
allow all — Endpoints are tested; however, they are always given access to the production
network.
NOTE: If you are setting up a cluster for the first time, and you have not yet added an ES, select
allow all until you have finished configuring Novell ZENworks Network Access Control.
3.11 Quarantining, 802.1X
The 802.1X quarantine (enforcement) method is enabled by default.
To select the 802.1X quarantine method:
Home window>>System configuration>>Quarantining
1 Select a cluster.
2 In the
Quarantine method
area, select the 802.1X radio button.
3
Click ok .
The following sections contain more information:
Š Section 3.11.1, “Entering Basic 802.1X Settings,” on page 73