HP ProCurve NAC 800 User Manual page 561

Port Parties
Ports used for accessible services and endpoints:
Varies ES to endpoint
Ports used for SNMPD:
161 (UDP) admin user to MS
or ES
162 (UDP/TCP) MS to SNMP
Table E-1. Ports in NAC 800 (cont.)
Description
In order to grant access for
quarantined endpoints to needed
services, add entries to the Accessible
services list.
For inline enforcement mode, enter the
IP addresses of the servers that
provide the services. A port or ports
can be added to limit the access to the
servers from quarantined endpoints.
For all other deployment modes, the
Fully Qualified Domain Name (FQDN) of
the target servers should be added to
the list (for example mycompany.com).
If the specified accessible servers are
not behind an ES, a network firewall
must be used to control access to only
the desired ports.
In DHCP mode, if your DHCP server has
other services besides DHCP for which
you need to allow access, be sure to
NOT allow port 67.
For example, add the entries
192.168.1.1:1:66 and
192.168.1.1:68:65535 to open all ports
besides 67.
Used for SNMP monitoring of the
server.
NOTE: See "Enabling SNMP" on page
3-28 for instructions on enabling
SNMP.
Traps for SNMP
Ports used in NAC 800
Comments
Configure in the NAC 800 user
interface:
Home window>>System
configuration>>Accessible
services
Example:
10.0.16.100:53
Separate multiple endpoint entries
with a carriage return (new line):
10.0.16.100:53
10.0.16.100:80
10.0.16.100:81
10.0.16.100:82
Enter a range of ports as follows:
10.0.16.100:53:65
Not Configurable
Not configurable
E-5