ProCurve 800, Руководство по настройке, Страница: 228 / 406

4-34
Configuring the RADIUS Server—Integrated with ProCurve Identity Driven Manager
Configure the NAC 800 as a RADIUS Server
vii. If you want to implement RADIUS accounting, specify the
RADIUS accounting server for the “accthost” value. Use this
syntax:
accthost= < FQDN or IP address >:< port number >
If you do not specify a port, the NAC 800 uses the default RADIUS
accounting port (1813).
If you do not want to implement accounting, re-insert the com-
ment marker (
#
) on this line.
viii. Specify the shared secret for the “secret” value. Use this syntax:
secret= < shared secret >
This value must match exactly the secret configured on the proxy
server for the NAC 800 (which should be added as a client to the
proxy server).
To include special characters and spaces, enclose the secret
within quotation marks (“ ”).
ix. The final configuration should resemble that shown in Figure 4-11.
x.
When you are done, leave insert mode by pressing
[Esc]
.
xi. Enter this command to save the changes:
:w
xii. Exit vi:
:q
N o t e
More advanced users can configure the NAC 800 to proxy various requests to
different RADIUS servers depending on the domain name or EAP type
included in the request. The comments in the
proxy.conf file give guidelines;
however, such configuration is not supported by ProCurve Networking.
4. You are now ready to specify your network’s NASs. (See “Add NASs as
802.1X Devices” on page 4-40.)
N o t e
If you are not comfortable using vi, you can save the file to your management
station and edit it with a text editor on that device. Then copy the file back to
the NAC 800 (preserving the
/etc/raddb/proxy.conf location and filename).
You can also use this option to copy the same file to multiple devices.