Proxying Radius Requests To An Existing Radius Server Using The Built-In Nac 800 Radius Server - HP ProCurve NAC 800 User Manual

TIP:
NOTE:
j. Repeat from step a for each user account.
Proxying RADIUS Requests to an Existing RADIUS Server
Using the Built-in NAC 800 RADIUS Server
For an explanation of how the components communicate, see "NAC 800 and
802.1X" on page 11-4.
To configure NAC 800 to proxy RADIUS requests to an existing RADIUS
server:
1. To configure the RADIUS server to proxy requests to your existing
RADIUS server:
a. Log in to the ES as root via SSH.
b. Open the following file with a text editor such as vi:
/etc/raddb/proxy.conf
c. Append the following section replacing the parameters in <> with
your RADIUS servers information:
realm NULL {
type= radius
authhost= <RADIUS host or IP>:<RADIUS auth port>
accthost= <RADIUS host or IP>:<RADIUS acct port>
secret= <the shared secret for your RADIUS server>
}
d. Save and exit the file.
The realm NULL section must go after the realm LOCAL section, or you can
comment out the realm LOCAL section.
2. Configure your RADIUS server to allow the NAC 800 IP address as a client
with the shared secret specified in the previous step. See your RADIUS
server's documentation for instructions on how to configure allowed
clients.
802.1X Quarantine Method
Setting up the 802.1X Components
11-33