HP ProCurve Series 3400cl Release Notes page 69

VENDOR
BEGIN-VENDOR
ATTRIBUTE
END-VENDOR
Figure 6. Example of Configuring the VSA for RADIUS-Based ACLs in a FreeRADIUS Server
2. Enter the switch IP address, NAS (Network Attached Server) type, and the key in the FreeRA-
DIUS clients.conf file. For example, if the switch IP address is 10.10.10.125 and the key is "1234",
you would enter the following in the server's clients.conf file:
client 10.10.10.125
nastype = other
secret = 1234
Figure 7. Example of Configuring the Switch's Identity Information in a FreeRADIUS Server
3. For a given client username/password pair or MAC address, create an ACL by entering one or
more ACEs in the FreeRADIUS "users" file. Enter the ACEs in an order that promotes optimum
traffic management and conservation of system resources, and remember that every ACL you
create automatically includes an implicit deny in ip from any to any ACE. (Refer to
Structuring a RADIUS-Based ACL" on page
identical ACL support for the following:
• a client having a username of "mobile011" and a password of "run101112"
• a client having a MAC address of 08 E9 9C 4F 00 19
The ACL in this example must achieve the following:
• permit http (TCP port 80) traffic from the client to the device at 10.10.10.101
• deny http (TCP port 80) traffic from the client to all other devices
• permit all other traffic from the client to all other devices
To configure the above ACL, you would enter the username/password and ACE information
shown in Figure 8
Note
For syntax details on RADIUS-based ACLs, refer to
RADIUS-Based ACL" on page
HP 11
HP
HP-IP-FILTER-RAW 61 STRING
HP
into the FreeRADIUS users file.
60.
ProCurve (HP) Vendor-Specific ID
Note: The key configured in the switch and the secret configured in
the RADIUS server supporting the switch must be identical. Refer to
the chapter titled "RADIUS Authentication and Accounting" in the
Access Security Guide for your switch.
55.) For example, suppose that you wanted to create
"Format Details for ACEs Configured in a
Enhancements
Release M.10.02 Enhancements
ProCurve (HP) Vendor-Specific
Attribute for RADIUS-Based ACLs
"Guidelines for
59