Enterasys-networks 9034385 Manual de usuario Pagina 16

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 98
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 15
NAC Solution Components
1-6 Overview
ofsupportingauthenticationand/orauthorization.TheNACControllerisalsorequiredinIPSec
andSSLVPNdeployments.
TheNACControllerprovidesintegratedvulnerabilityassessmentserverfunctionalityand
supportsbothagentless(networkbased)andagentbasedassessment.(Aseparatelicenseis
requiredforintegratedassessment.)Italsosupportstheabilityto
connecttomultipleexternal
assessmentserversincludingNessusandLockdownEnforcer.
TheNACControllercanbeconfiguredinoneoftwomodesofoperation:Layer2orLayer3.The
modeofoperationcontrolshowconnectingendsystemsaredetectedbytheNACControlleron
thenetworkandisselectedbased
onwheretheNACControllerispositionedinthenetworkin
relationtotheseendsystems.IftheNACControllerispositionedbeforethefirstroutedboundary
forconnectingendsystems,closertotheaccessedgeofthenetwork,theLayer2NACController
modeisutilized.Inthismode
ofoperation,theNACControllerdetectsconnectingendsystems
onthenetworkbyreceivingtrafficfromanewMACaddress.IftheNACControllerispositioned
afterthefirstroutedboundarydeeperinsidethenetwork,theLayer3NACControllermodeis
utilized.Inthismodeofoperation,theNACController
detectsconnectingendsystemsonthe
networkbyreceivingtrafficfromanewIPaddress.WiththeNACControllersupportingboth
Layer2andLayer3modesofoperation,theNACControllercanbestrategicallypositionedinthe
networktopologytoachievethedesiredlevelofscalabilityandsecurity.
TheNAC
Controllerisavailableintwomodels:
•2S408225SYS‐24Port10/100/1000NACControllersupportsupto2000concurrentend
systems.
7S428019SYS‐18PortSFPNACControllersupportsupto2000concurrentendsystems.
Vista de pagina 15
1 2 ... 11 12 13 14 15 16 17 18 19 20 21 ... 97 98

Comentarios a estos manuales

Sin comentarios