To Next Page

To Previous Page

Operation Manual – AAA-RADIUS-HWTACACS-EAD

H3C S3600 Series Ethernet Switches-Release 1510 Chapter 2

EAD Configuration

2-1

Chapter 2 EAD Configuration

2.1 Introduction to EAD

Endpoint admission defense (EAD) is an attack defense solution. Using this solution,

you can enhance the active defense capability of network endpoints, prevents viruses

and worms from spreading on the network, and protects the entire network by limiting

the access rights of insecure endpoints.

With the cooperation of switch, AAA sever, security policy server and security client,

EAD is able to evaluate the security compliance of network endpoints and dynamically

control their access rights.

With EAD, a switch:

z Verifies the validity of the session control packets it receives according to the

source IP addresses of the packets: It regards only those packets sourced from

authentication or security policy server as valid.

z Dynamically adjusts the VLAN, rate, packet scheduling priority and access control

list (ACL) for user terminals according to session control packets, whereby to

control the access rights of users dynamically.

2.2 Typical Network Application of EAD

EAD checks the security status of users before they can access the network, and

forcibly implements user access control policies according to the check results. In this

way, it can isolate the users that are not compliant with security standard and force

these users to update their virus databases and install system patches.

Figure 2-1

shows a typical network application of EAD.

H3C S3600 Series User Manual

Other manuals for H3C S3600 Series