HP Cloud Network Manager Software manual Configuring MAC authentication for a network profile

Page 53

4.The RADIUS server checks the user identity and authenticates the client if the user details are available in its database. The RADIUS server sends an Access-Acceptmessage to the NAS. If the RADIUS server cannot identify the user, it stops the authentication process and sends an Access-Rejectmessage to the NAS. The NAS forwards this message to the client and the client must re-authenticate with appropriate credentials.

5.After the client is authenticated, the RADIUS server forwards the encryption key to the NAS. The encryption key is used for encrypting or decrypting traffic sent to and from the client.

The NAS acts as a gateway to guard access to a protected resource. A client connecting to the wireless network first

connects to the NAS.

Configuring 802.1X authentication for a wireless network profile

To configure 802.1X authentication for a wireless network profile:

1.Select Wireless Configuration > Networks, select an existing profile for which you want to enable 802.1X authentication, and click Edit.

2.In Edit <profile-name>, ensure that all required WLAN and VLAN attributes are defined, and then click the SECURITY tab.

3.In SECURITY, for the Enterprise security level, select the preferred option from KEY MANAGEMENT.

4.To terminate the EAP portion of 802.1X authentication on the AP instead of the RADIUS server, set TERMINATION to Enabled.

For 802.1X authorization, by default, the client conducts an EAP exchange with the RADIUS server, and the AP acts as a relay for this exchange. When Termination is enabled, the AP itself acts as an authentication server, terminates the outer layers of the EAP protocol, and only relays the innermost layer to the external RADIUS server.

5.Specify the type of authentication server to use and configure other required parameters. For more information on configuration parameters, see Configuring security settings for a WLAN SSID profile on page 27.

6.Click the ACCESS tab to define access rules.

7.Click Save Settings.

Configuring MAC authentication for a network profile

MAC authentication can be used alone or it can be combined with other forms of authentication such as WEP authentication. However, it is recommended that you do not use the MAC-based authentication.

Configuring MAC authentication for wireless network profiles

To configure MAC authentication for a wireless profile:

1.Select Wireless Configuration > Network, select an existing profile for which you want to enable MAC authentication and click Edit.

2.In the Edit <profile-name>,ensure that all required WLAN and VLAN attributes are defined, and then click the SECURITY tab.

3.In SECURITY, for MAC AUTHENTICATION, select Enabled for Personal or Open security level.

4.Specify the type of authentication server to use and configure other required parameters. For more information on configuration parameters, see Configuring security settings for a WLAN SSID profile on page 27.

5.Click ACCESS tab to define access rules.

6.Click Save Settings.

Configuring MAC authentication with 802.1X authentication

To configure MAC authentication with 802.1X authentication for wireless network profile.

53 Wireless configuration

HP Cloud Network Manager User Guide

Page 52 Page 54
Image 53
Page 52 Page 54
Contents HP Cloud Network Manager User Guide Acknowledgments Document 5998-5742, edition 1 JulyContents Wireless configuration Advanced configuration tasks Captive portal for guest access Reports Maintenance Intended audience About this guideRelated documents ConventionsSupported APs Cloud Network Manager UI About Cloud Network ManagerCloud Network Manager overview Activating your Cloud Network Manager subscriptions Cloud Network Manager user interfaceActivating your HP Cloud Network Manager account Search Tabs Notifications Help Data pane User interfaceTabs SearchData pane NotificationsHelp Feedback SupportData pane item Description MonitoringOverview AP details Access pointsRemote Console System pane ClientsSection Description Data pane itemEvent log Setting notification alerts Initial AP configuration Wireless configurationWireless network profiles Importing existing configuration from APNetwork types Understanding wireless network profilesConfiguring Wlan settings Voice Guest Disable Ssid Content FilteDMO Channel UtilizationCan be Used Configuring Vlan settings for a Wlan Ssid profileWithout Uplink MAX Clients Local ProbeManagement KEY Management Configuring security settings for a Wlan Ssid profileKEY Roaming AuthenticatioTermination ServerConfiguring access rules for a Wlan Ssid profile Deleting a Wlan Ssid profile General configuration tasksEditing a Wlan Ssid profile Modifying the AP name Basic configuration tasksConfiguring time zone Configuring VC IP addressConfiguring a preferred band Configuring an NTP serverConfiguring VC Vlan Additional configuration tasksConfiguring auto join mode Configuring LED displayDisabling inter-user bridging Advanced configuration tasksPreventing local routing between clients Enabling dynamic CPU managementConfiguring Arrm assigned radio profiles for an AP Configuring radio profiles for an APConfiguring radio profiles manually for AP Customizing AP parametersSelect Administrator assigned in 2.4 GHz and 5 GHz Band Configuring uplink Vlan for an APMode Description Obtaining IP addressArrm overview Advanced radio resource managementAP control Airtime fairness modeHP MotionAware Arrm metrics Configuring Arrm on an APMonitoring the network with Arrm Motion Aware SLB ModeCalculating MA NeighborCustomize PowerValid ChannelsIntrusion detection system Configuring radio settings for an APOS fingerprinting Detecting and classifying rogue APsDetection level Detection policy Off Low Medium HighProtection level Protection policy Settings fieldOff Low High Containment methods AuthenticationUnderstanding authentication methods Wireless configuration Radius server authentication with VSA Supported authentication serversExternal Radius server Internal Radius serverConfiguring an external server for authentication Configuring authentication serversAuthentication termination on AP Shared KEY Shared KEY TimeoutRetype Retry CountClick Save Server Configuring dynamic Radius proxy parametersEnabling dynamic Radius proxy Configuring 802.1X authentication for a network profileConfiguring MAC authentication with 802.1X authentication Configuring MAC authentication for a network profileConfiguring WISPr authentication Blacklisting users dynamically Blacklisting clientsBlacklisting clients manually Configuring blacklist duration Captive portal for guest accessUnderstanding captive portal Session firewall based blacklistingTypes of captive portal Configuring a Wlan Ssid for guest accessWalled garden Select the Primary Usage as GuestInactivity Timeout Content FilteringMulticast Transmission Dynamic MulticastLocal Probe Request Can be Used WithoutUplink MAX Clients Threshold Configuring internal captive portal for guest network Select any one of the following types of authentication Configuring external captive portal for a guest networkExternal captive portal profiles Creating a captive portal profileUSE Https URLCaptive Portal FailureRule Type Configuring captive portal roles for an SsidSplash TypeExternal Configuring walled garden accessInternal Disabling captive portal authentication Dhcp configurationConfiguring Dhcp scopes Configuring local and local, L3 Dhcp scopesNetwork VlanNET Mask Excluded AddressConfiguring an AP for Rtls support ServicesConfiguring Dhcp server for client IP assignment Select Wireless Configuration Services RtlsBonjour support overview Configuring OpenDNS credentialsBonjour support configuration Bonjour support with Cloud Network Manager Bonjour support solutionSelect Wireless Configuration Services Bonjour Support Bonjour support featuresBonjour support services Integration with Cloud Network Manager Configuring an AP for PAN integrationIntegrating an AP with Palo Alto Networks firewall Wi-Fi uplink Uplink configurationConfiguring a Wi-Fi uplink profile Uplink interfacesEthernet uplink Configuring PPPoE uplink profileEnforcing uplinks Uplink preferences and switchingSetting an uplink priority From PRE-EMPTION, select Enabled Switching uplinks based on internet availabilityMobility and client management Layer-3 mobility overviewConfiguring L3-mobility Configuring enterprise domains Configuring L3 mobility domainEnterprise domain Snmp and loggingConfiguring community string for Snmp Configuring SnmpSnmp parameters for AP Creating community strings for SNMPv1 and SNMPv2Creating community strings for SNMPv3 Configuring a syslog serverConfiguring Snmp traps Logging level Description Configuring Tftp dump serverSelect Wireless Configuration System Logging Creating a report ReportsDeleting a report Subscription keys MaintenanceFirmware User management Device managementAbbreviation Expansion TerminologyAcronyms and abbreviations Definition GlossaryTerm EAP Term DefinitionDST POE Through a wireless connection

Cloud Network Manager Software specifications

HP Cloud Network Manager is a robust software solution designed to simplify and enhance the management of network infrastructure in cloud environments. As organizations increasingly shift toward cloud computing, they require comprehensive tools to oversee complex network deployments. HP Cloud Network Manager rises to this challenge, offering a powerful suite of features aimed at optimizing performance, automating tasks, and ensuring reliable connectivity.

One of the main features of HP Cloud Network Manager is its intuitive dashboard, which provides users with real-time insights into network operations. This centralized interface allows administrators to monitor the status of various components, identify potential issues, and respond swiftly to anomalies. With advanced analytics capabilities, the software empowers users to make data-driven decisions that enhance network efficiency.

Another critical feature of this software is its automation capabilities. HP Cloud Network Manager simplifies routine network management tasks, such as configuration, provisioning, and software updates, allowing IT teams to focus on strategic initiatives rather than mundane maintenance. Automation reduces the risk of human error and accelerates deployment times, significantly increasing operational agility.

The software also supports multi-cloud environments, enabling organizations to manage their network resources across different cloud platforms seamlessly. This flexibility is essential for businesses that utilize various cloud providers and wish to maintain a unified network strategy. Coupled with its compatibility with open standards, HP Cloud Network Manager facilitates integration with existing IT ecosystems, ensuring a smooth transition to advanced cloud solutions.

Security is a top priority in today's digital landscape, and HP Cloud Network Manager includes integrated security features to protect network assets. It provides visibility into traffic patterns, helping to detect and mitigate potential threats before they become significant issues. Enhanced security protocols ensure that sensitive data remains protected during transit and at rest, aligning with compliance requirements.

Finally, HP Cloud Network Manager is built on cutting-edge technologies, including artificial intelligence and machine learning, which enable proactive network management. These technologies predict network behavior, assisting administrators in optimizing resources and anticipating potential challenges. As a result, organizations can achieve enhanced reliability and performance from their network infrastructure.

In summary, HP Cloud Network Manager is an essential tool for businesses looking to improve their cloud network management capabilities. With its powerful features, supportive technologies, and commitment to security, it stands out as a reliable solution for navigating the complexities of modern network environments.
Top Page Image Contents