HP J9574A Access Security Guide

7-31
Configuring RADIUS Server Support for Switch Services
Configuring and Using Dynamic (RADIUS-Assigned) Access Control Lists
Note For information on syntax details for RADIUS-assigned ACLs, refer to the next
section.
Figure 7-8. Example of Configuring a FreeRADIUS Server To Filter IPv4 and IPv6 Traffic for a Client Using the
Correct Username and Password Credentials.
Admin01 Auth-Type:= Local, User-Password == myAuth9
HP-Nas-Rules-IPv6 = 1,
Nas-filter-rule = “permit in tcp from any to FE80::a40 80”,
Nas-filter-rule += “deny in tcp from any to ::/0 80”,
Nas-filter-rule += “permit in tcp from any to 10.10.10.117 80”,
Nas-filter-rule += “deny in tcp from any to 0.0.0.0/0 80”,
Nas-filter-rule += “deny in tcp from any to any 23”,
Nas-filter-rule += “permit in ip from any to any”
Client’s Username (802.1X or Web Authentication)
Client’s Password (802.1X or Web Authentication)
In an ACL that filters both IP and IPv6 traffic
type, the any keyword used for a destination
includes both IPv4 and IPv6 traffic. As a result,
this ACE denies Telnet traffic from the client to
any IPv4 or IPv6 address.
IPv6 VSA for the standard attribute-92.

HP J9574A Specifications

General

Brand	HP
Model	J9574A
Category	Switch
Language	English