H3C S3600 Series User Manual

Operation Manual – AAA-RADIUS-HWTACACS-EAD
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 2
EAD Configuration
2-2
Client
Virus patch server
Client
Authentication server
Security policy server
Virus patch server
Client
Virus patch server
Client
Authentication server
Security policy server
Virus/patch server
Client
Virus patch server
Client
Authentication server
Security policy server
Virus patch server
Client
Virus patch server
Client
Authentication server
Security policy server
Virus/patch server
Figure 2-1 Typical network application of EAD
After a client passes the authentication, the security Client (software installed on the
client PC) interacts with the security policy server to check the security status of the
client. If the client is not compliant with the security standard, the security policy server
issues an ACL to the switch, which then inhibits the client from accessing any parts of
the network except for the virus/patch server.
After the client is patched and compliant with the required security standard, the
security policy server reissues an ACL to the switch, which then assigns access right to
the client so that the client can access more network resources.
2.3 EAD Configuration
The EAD configuration includes:
z Configuring the attributes of access users (such as user name, user type, and
password). For local authentication, you need to configure these attributes on the
switch; for remote authentication, you need to configure these attributes on the
AAA sever.
z Configuring RADIUS scheme.
z Configuring the IP address of the security policy server.
z Associating domain with RADIUS scheme.
EAD is commonly used in RADIUS authentication environment.
This section mainly describes the configuration of security policy server IP address. For
other related configuration, refer to
Chapter 1 “AAA & RADIUS & HWTACACS
Configuration
”.

H3C S3600 Series Specifications

General

Brand	H3C
Model	S3600 Series
Category	Switch
Language	English