3Com 3C17300A Implementation Guide - Page 83

Auto VLAN Assignment, Important Considerations, RADIUS Server settings for Rada, Important

Get 3Com 3C17300A - Switch 4200 PDF manuals and user guides
UPC - 662705493169
View all 3Com 3C17300A manuals
Add to My Manuals
Save this manual to your list of manuals

Page 83 highlights

Auto VLAN Assignment 83 ■ allowDefaultAccess grants a device access based on the port's configured VLAN and QoS parameters. ■ blockMacAddress blocks (filters) any traffic to or from the device. Rada is similar to DUD (Disconnect Unauthorized Device), only Rada affects a single device where as DUD affects the whole port. Rada can also be used in conjunction with the existing 802.1X Secure Network Login to provide the capability to support a variety of host and network configurations. RADIUS Server settings for Rada When setting up Rada on a RADIUS server the following attributes should be taken into consideration. ■ Users must be set up on the RADIUS Server for each device that is to be authenticated, using the MAC address for username and the same MAC address for the password. ■ The username should be set as the MAC address of the device. This must be of the form of Hex digits separated by hyphens, for example '08-05-54-AB-CD-EF'. Table 7 Setting Rada attributes Attribute Framed-Protocol Service-Type Value PPP Framed Auto VLAN Assignment Auto VLAN assignment complements the basic Network Login and Rada features. It allows an appropriate VLAN configuration to be obtained from a RADIUS server when a user or device authenticates on a port. The configuration obtained will be specific to the user or device authenticated on the port. The RADIUS Server may be configured with VLAN parameters for each user or device. One or more VLANs may be configured for each user, to allow multiple VLANs to be communicated to the device requesting the user authentication. Important This section contains some important considerations when using Network Considerations Login or Rada on the Switch .

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
Auto VLAN Assignment
83
■
allowDefaultAccess grants a device access based on the port’s
configured VLAN and QoS parameters.
■
blockMacAddress blocks (filters) any traffic to or from the device.
Rada is similar to DUD (Disconnect Unauthorized Device), only Rada
affects a single device where as DUD affects the whole port.
Rada can also be used in conjunction with the existing 802.1X Secure
Network Login to provide the capability to support a variety of host and
network configurations.
RADIUS Server settings for Rada
When setting up Rada on a RADIUS server the following attributes should
be taken into consideration.
■
Users must be set up on the RADIUS Server for each device that is to
be authenticated, using the MAC address for username and the same
MAC address for the password.
■
The username should be set as the MAC address of the device. This
must be of the form of Hex digits separated by hyphens, for example
‘08-05-54-AB-CD-EF’.
Table 7
Setting Rada attributes
Auto VLAN
Assignment
Auto VLAN assignment complements the basic Network Login and Rada
features. It allows an appropriate VLAN configuration to be obtained
from a RADIUS server when a user or device authenticates on a port. The
configuration obtained will be specific to the user or device authenticated
on the port.
The RADIUS Server may be configured with VLAN parameters for each
user or device. One or more VLANs may be configured for each user, to
allow multiple VLANs to be communicated to the device requesting the
user authentication.
Important
Considerations
This section contains some important considerations when using Network
Login or Rada on the Switch .
Attribute
Value
Framed-Protocol
PPP
Service-Type
Framed