Đang chuẩn bị nút TẢI XUỐNG, xin hãy chờ
Tải xuống
Sử dụng danh sách hàng tồn kho từ tài liệu của thiết bị chuyển mạch của bạn, bạn có thể bắt đầu đánh giá các thiết bị chuyển mạch tham gia trong việc thực thi 802.1x. Liên hệ với trang web của nhà cung cấp để tìm hiểu về bất kỳ vấn đề được biết đến với sử dụng NAP và về bất kỳ bản cập nhật cần thiết. | 272 Chapter 5 Designing a Network Access Strategy Which type of 802.1x enforcement access control list ACL or virtual local area network VLAN will you use Must you support PXE boot Using the inventory list from the documentation of your switches you can begin assessing the switches involved in the 802.1x enforcement. Contact the vendor s Web site to find out about any known issues with employing NAP and about any necessary updates. Access Point Considerations As 802.1x authentication proliferates more and more vendors are adding NAP support. There are even blogs devoted to listing security vendors supporting NAP. Finding hardware is not the problem discerning whether the hardware currently in use is or can be made compliant is the issue. Purchasing new hardware is always an easy way to attain compliance but is also the most expensive. MORE INFO 802.1x enforcement The Microsoft NAP team has provided a specific blog that lists switches tested for 802.1x enforcement. This list is not meant to be exhaustive in fact it appears rather to be a list about a single device from the major network infrastructure vendors that was tested for 802.1x enforcement abilities. The assumption is that there is support from each of these vendors in their product line because most of the vendors use a similar operating system across much of the same line of hardware. You can see this blog at http blogs.technet.com nap archive 2007 07 10 nap-802-1x -enforcement-switches-we-ve-tested-w-nap.aspx. When examining compliance look for specific RADIUS support. The Microsoft NAP supports the following vendor-specific attributes VSA and RADIUS attributes for defining the restricted network with 802.1x enforcement Filter-ID for identifying the ACL Tunnel-Medium-Type Tunnel-Pvt-Group-ID Tunnel-Type Tunnel-Tag For setting the periodic re-authentication interval the standard Session-Timeout RADIUS attribute has broad support from most of the hardware vendors. ACLs vs. VLANs 802.1x enforcement can .
