Before Installation | 23 |
Before Installation You must perform the following tasks on your network before installing and setting up 3Com Network Access Manager:
1Install and configure Microsoft Internet Authentication Service (IAS),
a Install IAS on one or more Windows 2000 servers or Windows 2003 servers in the network. IAS is included as part of the operating system. For information on setting up IAS, refer to the Microsoft documentation supplied with IAS.
b Ensure all 3Com devices in the network that will use IAS are configured in IAS as RADIUS clients with
c Setup an IAS Remote Access Policy that 3Com Network Access Manager will be required to use to authenticate users and computers. Refer to Appendix A for details on how to create an IAS Remote Access Policy.
For 3Com Network Access Manager to operate correctly with IAS, do not specify a VLAN list or QoS profile as part of the Remote Access Policy.
2Ensure all Users, Groups and Computers have been added to Microsoft Active Directory for your network domain, refer to the user documentation supplied with Active Directory for details.
3Configure the 3Com switches and wireless access points on your network
a Configure the 3Com switches with consistent VLAN and QoS settings throughout the network.
b Configure all edge ports on 3Com switches with a suitable and consistent edge port security mode and Intrusion Action setting. For information on edge port security modes suitable for use with 3Com Network Access Manager, see “Configuring Edge Port Security” in Chapter 1.
CAUTION: Using different security modes on switch edge ports on your network, will result in different meanings for RADIUS responses across the network.
Use 3Com Network Director or 3Com Enterprise Management Suite to make the VLAN, QoS and port security mode settings, or else configure each switch through its web or command line interface. Refer to the user documentation accompanying the management application or switch for details.
