Ead Configuration Tasks - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
Virus patch server
Client
Figure 4-1 EAD network application
After a user client passes the authentication, the security client (software installed on
the client PC) checks the security condition of the user client and interacts with the
security policy server. If its security condition is unqualified, the security policy server
delivers an ACL packet to let the switch only allow the user client to access the virus
patch server.
When the user client is installed with the virus patches and its security condition
becomes qualified, the security condition information is then sent to the security policy
server, which delivers an ACL packet to let the switch enable the access right of the
user client. The user client can then access more network resources.

4.3 EAD Configuration Tasks

Table 4-1 EAD configuration tasks
Configuration step
Enter system view
Enter RADIUS scheme
view
Configure IP address for
the security policy server
Authentication server
Security policy server
Command
system-view
radius
radius-scheme-name
session-control-server
ip-address
Huawei Technologies Proprietary
4-2
Chapter 4 EAD Configuration
Description
––
scheme
––
In a RADIUS scheme,
you can configure up to
eight security
servers with different IP
addresses.
policy