Netgear XCM8806 Chassis User Manual - Page 409

NETGEAR 8800 User Manual • RADIUS server that supports NAP (Microsoft Windows Vista operating system refers to this as a network policy server (NPS), formerly known as the internet authentication server (IAS)). • Remediation servers that receive unhealthy supplicants. The remediation servers contain the appropriate software updates, anti-virus software, and so on to make a supplicant healthy. In addition to the required hardware and software, you must configure NAP-specific VSAs on your RADIUS server. By configuring these VSAs, you ensure supplicant authentication and authorization to the network and the switch creates dynamic Access Control Lists (ACLs) to move unhealthy supplicants to the quarantine VLAN for remediation. For more information, see Using NAP-Specific VSAs to Authenticate 802.1x Supplicants on page 411. Figure 26 displays a sample network that uses NAP to protect the network. Domain controller running Active Directory IAS/NPS Remediation server EPICenter Production VLAN (Corporate network) Workstation Remediation server Quarantine VLAN EX_174 Figure 26. Sample Network Using NAP to Provide Enhanced Security Example Scenarios Using NAP Using Figure 26, the following two scenarios describe some sample actions taken when an 802.1x-enabled supplicant initiates a connection to the network. The scenarios assume the following: • Scenario 1 has a healthy 802.1x-enabled supplicant. • Scenario 2 has an unhealthy 802.1x-enabled supplicant. • 802.1x network login has been configured and enabled on the switch. Chapter 16. Network Login | 409