3Com DUA1550-0AAA02 manual Authorization, Device Type Minimum Agent Version or Other requirement

18CHAPTER 1: INTRODUCTION

Authorization

Once a user has successfully authenticated, the authorization process determines which VLANs and QoS to return to the switch, as follows:

1From the authentication rule selected, if any VLAN has been specified, return the VLAN ID in the RADIUS response.

2From the authentication rule selected, if a QoS profile has been specified, return the QoS Profile ID in the RADIUS response.

Devices Supported The following 3Com devices are supported by 3Com Network Access Manager v1.1:

Table 3 3Com Devices Supported By 3Com Network Access Manager

Device Type	Minimum Agent Version or
	other requirement
SuperStack3 Switch 4400	v5.0
SuperStack3 Switch 4400 SE	v5.0
SuperStack4 Switch 5500	v1.0
Wireless LAN Access Point 8250	v3.2 supporting RADIUS and VSA
Wireless LAN Access Point 8750	v3.2 supporting RADIUS and VSA
Wireless LAN Access Point 7250	v3.2 supporting RADIUS and VSA

Ensure that the configurations of the devices on your network are consistent with the security policy to be set up using 3Com Network Access Manager.

Configuring Edge If VLANs are to be configured in 3Com Network Access Manager then Port Security edge ports on switches across the network need to be set to a security

mode that supports auto-VLANS. If VLANs are not to be set up in 3Com Network Access Manager, then the devices do not need to support auto-VLANs.

In addition, the edge ports on switches must be set to consistent modes, otherwise the same RADIUS response will yield different actions on different ports. For example, RADA And Network Login only allows user login if the RADIUS server returns Accept. RADA-Else-Network Login only allows user login if the RADIUS server returns Reject.