ProCurve 800, Руководство по настройке

Страница: 272 / 406

5-8
Configuring the RADIUS Server—Without Identity Driven Manager
Configure the NAC 800 as a RADIUS Server
Configure the NAC 800 as a RADIUS
Server
You must complete these tasks to set up the ProCurve NAC 800 as your
network’s RADIUS server:
1. Configure your network’s NASs—including, as necessary, switches and
wireless APs—to use the NAC 800 as their RADIUS server.
The NAC 800 can be the NASs’ primary or secondary server.
Refer to your devices’ documentation for instructions on completing this
task.
2. Complete initial configuration of the NAC 800.
See Chapter 3: “Initial Setup of the ProCurve NAC 800.”
If you are adding the RADIUS-only NAC 800 to an existing system of NAC
800s, create a cluster for 802.1X enforcement and add the new NAC 800
as an ES.
3. Select 802.1X for the quarantine method.
See “Specify the Quarantine Method (802.1X)” on page 5-8.
4. Configure the authentication settings, which determine, for example,
where the database of usernames and passwords is stored.
See “Configure Authentication Settings” on page 5-10.
5. Add your network’s NASs—switches, APs, and Wireless Edge Services
Modules—as 802.1X devices.
6. See “Add NASs as 802.1X Devices” on page 5-34.
7. Apply your configuration changes.
See “Apply Changes” on page 5-38.
Specify the Quarantine Method (802.1X)
To act as a RADIUS server, the ProCurve NAC 800 must implement the 802.1X
quarantine method. (However, you can disable the quarantining by disabling
endpoint testing. See Chapter 6: “Disabling Endpoint Integrity Testing.”)