3com DUA1550-0AAA02 Manuel D’Utilisation

Page de 136
72
C
HAPTER
 4: U
SING
 3C
OM
 N
ETWORK
 A
CCESS
 M
ANAGER
 W
ITHIN
 A N
ETWORK
Case Study 1 - 
Controlling User 
Access To The 
Network
This case study describes the tasks that need to be performed in order to 
control user access to the network using IEEE 802.1X. This method of 
authentication is based on the user, and does not perform authentication 
of the PC (or other client device) being used.
Network
Administrator Tasks
The following provides an overview of the tasks for a network 
administrator responsible for the domain on the network.
Ensure edge port security is set to IEEE 802.1X on edge ports in the 
domain.
Edge ports are called ‘access ports’ on the Switch 5500.
Using 3Com Network Access Manager:
Select the Default Rule and set the Network Access to Deny, see 
Create an Authorized Users rule which will allow network access, see 
Set security permissions for the rule. Grant READ and WRITE access to 
the users/groups permitted to apply the rule, grant READ access to all 
Network Administrators in the domain to ensure they can see that the 
rule exists even if they are not permitted to apply the rule.
Set the Actions for the rule: select the rule priority, and set Network 
Access to Allow, if appropriate select the VLAN, QoS profile and EFW 
policy for the rule.
Associate the Authorized Users rule with users and groups already listed 
in Active Directory
Ensure the network operators or those individuals responsible for 
applying the Authorized Users rule have the Network Operator 
component of 3Com Network Access Manager installed on their PC.