Supported Access Points - Brocade Communications Systems RFS6000 System Reference Manual

1
Software overview
•
NAT
Network Address Translation (NAT) is supported for packets routed by the controller. The following
types of NAT are supported:
•
•
Certificate management
Certificate Management is used to provide a standardized procedure to:
•
•
•
Certificate management will be used by the applications HTTPS, VPN, HOTSPOT and Radius. For
information on configuring controller certificate management, see
page 443.
NAC
Using Network Access Control (NAC), the controller hardware and software grants access to
specific network resources. NAC performs a user and Client authorization check for resources that
do not have a NAC agent. NAC verifies a Client's compliance with the controller's security policy.
The controller supports only the EAP/802.1x type of NAC. However, the controller also provides a
mean to bypass NAC authentication for Client's that do not have NAC 802.1x support (printers,
phones, PDAs etc.). For information on configuring NAC support, see
support"

Supported Access Points

A RF controller supports the adoption of the following Brocade Enterprise Access Points:
•
•
•
24
IPSec/L2TP (client to controller)
Port NAT– Port NAT (also known as NAPT) entails multiple local addresses are mapped to
single global address and a dynamic port number. The user is not required to configure any
NAT IP address. Instead IP address of the public interface of the controller is used to NAT
packets going out from private network and vice versa for packets entering private network.
Static NAT– Static NAT is similar to Port NAT with the only difference being that it allows the
user to configure a source NAT IP address and/or destination NAT IP address to which all the
packets will be NATted to. The source NAT IP address is used when hosts on a private network
are trying to access a host on a public network. A destination NAT IP address can be used for
public hosts to talk to a host on a private network.
Generate a Server certificate request and upload the server certificate signed by certificate
authority (CA).
Uploading of CA's root certificate
Creating a self-signed certificate
on page 136.
Mobility 300
Mobility 5181
Mobility 7131
"Creating Server Certificates"
Brocade Mobility RFS6000 and RFS7000 System Reference Guide
"Configuring NAC server
53-1001858-01
on