ProCurve 800, Руководство по настройке, Страница: 200 / 406

4-6
Configuring the RADIUS Server—Integrated with ProCurve Identity Driven Manager
Overview
In addition, IDM provides these services for NAC 800s:
■
A tool for adding user accounts to the NAC 800’s local database
■
Access to the NAC 800’s Web browser interface
■
Profiles for authenticated users based on their endpoint integrity posture
(pass, fail, infected, or unknown)
For more information on IDM and how it interacts with the NAC 800, see “IDM”
on page 2-50 of Chapter 2: “Management Options for the ProCurve NAC 800.”
N o t e
To function with the NAC 800, IDM’s version number must be 2.2 auto-update
2. The NAC 800’s IDM agent version must match the IDM version.
The NAC 800 includes the IDM agent at its factory default settings; you do not
need to install it. If the IDM agent is upgraded, the release notes will instruct
you how to upgrade the agent on the NAC 800.
To check the current IDM agent version, log in to the NAC 800 as root and
enter:
more /root/version
Data Store Overview
The NAC 800 can search one of several locations, or data stores, for a user’s
credentials:
■
A local database of users
■
A Windows domain controller, which runs Active Directory (AD)
■
A Lightweight Directory Access Protocol (LDAP) server:
• OpenLDAP
• Novell eDirectory
■
Another RADIUS server (via a proxy request)
You choose the data store when you configure the NAC 800’s (or cluster’s)
end-user authentication method. (See “Configure Authentication Settings” on
page 4-14.)