Wired Intelligent Edge

last person joined: 13 hours ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

AAA/NAC Comware v7 Feedback

This thread has been viewed 2 times

  • 1.  AAA/NAC Comware v7 Feedback

    EMPLOYEE
    Posted Oct 24, 2016 07:48 AM
      |   view attached

    Hi,

     

    Here some feedbacks with AAA/NAC features on Comware V7 (5130/5510HI/etc..)

    Hope it will help !

    Regards,

    Serge

    Attachment(s)

    pdf
    AAA&NAC Comware v7 PoC v1.4.pdf   983 KB 1 version


  • 2.  RE: AAA/NAC Comware v7 Feedback

    Posted Dec 07, 2016 04:17 AM

    Hello Serge,

     

    On page 15 there is a diagram with all the features.

    I have 5510 switches and 5400. And for the 5400 i also use dynamic ACL.

     

    On this page it says that on the 5130 and 5510 also dynamic ACL are supported.

     

    Do you have an example of how to do this in clearpass for the 5510.

     

    Already my thanks.



  • 3.  RE: AAA/NAC Comware v7 Feedback

    EMPLOYEE
    Posted Dec 07, 2016 06:09 AM

    You should use the standard Radius « Filter-Id » Attribute (11) 

    And define the value as the ACL number you want to apply on the authenticated port.

     

    Or

     

    Use the user-profile feature. In the case, set user-profile name as standard Radius Filter-id attribute (11)

     

    User-profile test
         qos apply policy test inbound

    acl number 3000
     rule 0 permit tcp source-port eq 21

    traffic classifier classifier_1
    if-match acl 3000

    traffic behavior behavior_1
     filter deny

    qos policy test
      classifier classifier_1 behavior behavior_1

    User-profile test enable

     

    Regards



  • 4.  RE: AAA/NAC Comware v7 Feedback

    Posted Dec 07, 2016 08:15 AM

    Thanks for the quick replay,

     

    I will test it.

     

    Good document by the way.

     

    Keep it coming