Enterasys-networks 9034385 Manuale Utente Pagina 16

  • Scaricare
  • Aggiungi ai miei manuali
  • Stampa
  • Pagina
    / 98
  • Indice
  • SEGNALIBRI
  • Valutato. / 5. Basato su recensioni clienti
Vedere la pagina 15
NAC Solution Components
1-6 Overview
ofsupportingauthenticationand/orauthorization.TheNACControllerisalsorequiredinIPSec
andSSLVPNdeployments.
TheNACControllerprovidesintegratedvulnerabilityassessmentserverfunctionalityand
supportsbothagentless(networkbased)andagentbasedassessment.(Aseparatelicenseis
requiredforintegratedassessment.)Italsosupportstheabilityto
connecttomultipleexternal
assessmentserversincludingNessusandLockdownEnforcer.
TheNACControllercanbeconfiguredinoneoftwomodesofoperation:Layer2orLayer3.The
modeofoperationcontrolshowconnectingendsystemsaredetectedbytheNACControlleron
thenetworkandisselectedbased
onwheretheNACControllerispositionedinthenetworkin
relationtotheseendsystems.IftheNACControllerispositionedbeforethefirstroutedboundary
forconnectingendsystems,closertotheaccessedgeofthenetwork,theLayer2NACController
modeisutilized.Inthismode
ofoperation,theNACControllerdetectsconnectingendsystems
onthenetworkbyreceivingtrafficfromanewMACaddress.IftheNACControllerispositioned
afterthefirstroutedboundarydeeperinsidethenetwork,theLayer3NACControllermodeis
utilized.Inthismodeofoperation,theNACController
detectsconnectingendsystemsonthe
networkbyreceivingtrafficfromanewIPaddress.WiththeNACControllersupportingboth
Layer2andLayer3modesofoperation,theNACControllercanbestrategicallypositionedinthe
networktopologytoachievethedesiredlevelofscalabilityandsecurity.
TheNAC
Controllerisavailableintwomodels:
•2S408225SYS‐24Port10/100/1000NACControllersupportsupto2000concurrentend
systems.
7S428019SYS‐18PortSFPNACControllersupportsupto2000concurrentendsystems.
Vedere la pagina 15
1 2 ... 11 12 13 14 15 16 17 18 19 20 21 ... 97 98

Commenti su questo manuale

Nessun commento