Setting Up The 802.1X Components; Setting Up The Radius Server - HP ProCurve NAC 800 User Manual

Setting up the 802.1X Components

In order to use NAC 800 in an 802.1X environment, ProCurve recommends
configuring your environment first, then installing and configuring NAC 800.
This section provides instructions for the following:
"Setting up the RADIUS Server" on page 11-7
■
■ "Enabling NAC 800 for 802.1X" on page 11-39
"Setting up the Supplicant" on page 11-40
■
■ "Setting up the Authenticator" on page 11-48

Setting up the RADIUS Server

Switches support 802.1X authentication by authenticating against a RADIUS
server. The NAC 800 802.1X solution must be integrated with the RADIUS
authentication to "intervene" in the authentication process, test endpoints,
and assign them to the appropriate VLAN. NAC 800 can be deployed and
integrated with RADIUS in the following three ways:
■ Install the NAC 800 Plug-in to the Microsoft® IAS RADIUS server (see
"This section provides instructions for how to install the Microsoft
IAS to the NAC 800 IAS plug-in." on page 11-7).
Proxy requests from the built-in NAC 800 RADIUS server to any other
■
RADIUS server (see "Proxying RADIUS Requests to an Existing
RADIUS Server Using the Built-in NAC 800 RADIUS Server" on
page 11-33).
■ Use the built-in NAC 800 RADIUS server for authentication (see
"Enabling NAC 800 for 802.1X" on page 11-39).
Any of these solutions can be customized to work with your existing LDAP or
Active Directory user databases. This section provides instructions of config-
uring these three options.
Using the NAC 800 IAS Plug-in to the Microsoft IAS RADIUS
Server
This section provides instructions for how to install the Microsoft IAS to the
NAC 800 IAS plug-in.
TIP:
For an explanation of how the components communicate, see "NAC 800 and
802.1X" on page 11-4.
802.1X Quarantine Method

Setting up the 802.1X Components

11-7