Quick Ead Deployment Configuration; Introduction To Quick Ead Deployment; Quick Ead Deployment Overview; Operation Of Quick Ead Deployment - 3Com WX3000 Series Operation Manual

2

Quick EAD Deployment Configuration

Introduction to Quick EAD Deployment

Quick EAD Deployment Overview

As an integrated solution, an endpoint admission defense (EAD) solution can improve the overall
defense power of a network. In real applications, however, deploying EAD clients proves to be
time-consuming and inconvenient.
The device enables the quick deployment of EAD clients by implementing mandatory EAD client
distribution through 802.1x authentication.

Operation of Quick EAD Deployment

The device implements quick EAD deployment by leveraging the following two functions to enable
mandatory EAD client distribution:
Restricted access
Before passing 802.1x authentication, a user is restricted (through ACLs) to a specific range of IP
addresses or a specific server. Services like EAD client upgrading/download and dynamic address
assignment are available on the specific server.
HTTP redirection
Whenever a user accesses the Internet through the Internet Explorer (IE) before passing 802.1x
authentication, the device redirects the user to a predefined URL, such as the EAD client download
interface.
With the above two functions of quick EAD deployment, the device redirects all users to a server to
download and install the EAD client, resolving the EAD client deployment problem.
The quick EAD deployment feature takes effect only when the authorization mode of an 802.1x-enabled
port is set to auto.

Configuring Quick EAD Deployment

Configuration Prerequisites

Enable 802.1x on the device.
Set the port authorization mode to auto for 802.1x-enabled ports.
2-1