ProCurve 800, Руководство по настройке, Страница: 45 / 406

1-33
Overview of the ProCurve NAC 800
Deployment Methods
Deployment Methods
The NAC 800 can control network access in variety of ways. It can make
decisions based on
who is connecting (authentication) as well as on what is
connecting and the risks that device might pose (endpoint integrity).
In addition, the NAC 800 can control network access for endpoints connecting
from a variety of locations, including:
■
A Virtual Private Network (VPN) connection
■
A Wide Area Network (WAN) connection
■
A wireless connection
■
A LAN connection
Finally, the NAC 800 is suitable for a variety of environments featuring
different types of equipment and security capabilities. For example, the NAC
800 can add endpoint integrity testing to a network that already enforces
authentication and access control. Or the NAC 800 can test for endpoint
integrity in a network with fewer capabilities and an older infrastructure.
You must consider all of these factors—which type of access control you
desire for which users in a network with which capabilities—as you determine
how and where to deploy your NAC 800s.
Deployment methods are also called enforcement options or quarantine meth-
ods because how the NAC 800 enforces access control determines how and
where you must deploy it.
The NAC 800 has three deployment (quarantine) methods:
■
802.1X
■
DHCP
■
Inline
The sections below describe these methods in more detail.
N o t e
When you purchase your NAC 800, you also purchase the ProCurve Network
Access Controller 800 Implementation Start-up Service. Your ProCurve solu-
tions provider will help you think through options and plan your deployment.