Dhcp Quarantine Method - HP 800 User Manual

Contents

10 DHCP Quarantine Method

11 802.1X Quarantine Method
x
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-2
Configuring NAC 800 for DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4
Setting up a Quarantine Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4
Router Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4
Configuring the Router ACLs 10-5
Configuring Windows Update Service for XP SP2 . . . . . . . . . . . . . . . . . . 10-5
About 802.1X . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-2
NAC 800 and 802.1X . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-4
Setting up the 802.1X Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-7
Setting up the RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-7
Using the NAC 800 IAS Plug-in to the Microsoft IAS RADIUS Server
11-7
Configuring the Microsoft IAS RADIUS Server 11-9
Proxying RADIUS Requests to an Existing RADIUS Server Using the
Built-in NAC 800 RADIUS Server 11-32
Using the Built-in NAC 800 RADIUS Server for Authentication 11-35
Configuring Non-HP Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-35
Enabling NAC 800 for 802.1X . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-38
NAC 800 User Interface Configuration 11-38
Setting up the Supplicant . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-39
Windows XP Professional Setup 11-39
Windows XP Home Setup 11-41
Windows 2000 Professional Setup 11-42
Windows Vista Setup 11-44
Setting up the Authenticator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-47
Cisco® 2950 IOS 11-48
Cisco® 4006 CatOS 11-49
Enterasys® Matrix 1H582-25 11-49
Extreme® Summit 48si 11-50
ExtremeWare 11-51
ExtremeXOS 11-51
Foundry® FastIron® Edge 2402 11-52
HP ProCurve 420AP 11-52
HP ProCurve 530AP 11-53
HP ProCurve 3400/3500/5400 11-55
Nortel® 5510 11-55
Creating Custom Expect Scripts 11-56