Secure Networks Policy Support; Standards Compatibility; Lanview Diagnostic Leds - Enterasys Matrix 7G4270-12 Hardware Installation Manual

Secure Networks Policy Support

1.5 SECURE NETWORKS POLICY SUPPORT
Policy Enabled Networking manages the allocation of networking infrastructure resources in a
secure and effective manner. Using Secure Networks Policy, an IT Administrator can predictably
assign appropriate resources to the Users, Applications, and Services that use the network; while
blocking or containing access for inappropriate or potentially dangerous network traffic. Using this
technology it is possible, for the first time, to align IT services with the needs of specific users and
applications, and to leverage the network as a key component of the organization's security
strategy.
The Secure Networks Policy Architecture consists of 3 components: Classification Rules,
Network Services, and Behavioral Profiles. These are defined as follows:
•
Classification Rules determine how specific traffic flows (identified by Layer 2, Layer 3, and
Layer 4 information in the data packet) are treated by each Switch or Router. In general,
Classification Rules are applied to the networking infrastructure at the network edge/ingress
point.
•
Network Services are logical groups of Classification Rules that identify specific networked
applications or services. Users may be permitted or denied access to these services based on their
role within the organization. Priority and bandwidth rate limiting may also be controlled using
Network Services.
•
Behavioral Profiles (or roles) are used to assign Network Services to groups of users who share
common needs–for example Executive Managers, Human Resources Personnel, or Guest Users.
Access, resources, and security restrictions are applied as appropriate to each Behavioral Profile.
A variety of authentication methods including 802.1X, EAP-TLS, EAP-TTLS, and PEAP may
be used to classify and authorize each individual user; and the IT Administrator may also define
a Behavioral Profile to apply in the absence of an authentication framework.
1.6

STANDARDS COMPATIBILITY

The DFE modules are fully compliant with the IEEE 802.3-2002, 802.3ae-2002, 802.1D-1998,
and 802.1Q-1998 standards. The DFE module provides IEEE 802.1D-1998 Spanning Tree
Algorithm (STA) support to enhance the overall reliability of the network and protect against
"loop" conditions.
1.7

LANVIEW DIAGNOSTIC LEDs

LANVIEW diagnostic LEDs serve as an important troubleshooting aid by providing an easy way
to observe the status of individual ports and overall network operations.
1-8 Introduction