UPN Support

1.11 UPN SUPPORT

User Personalized Networks (UPN) is an architecture that allows network administrators to map network services to identified users, machines, peripherals and other network entities. UPN consists of three tiers:

Classification rules make up the first or bottom tier. The rules apply to devices in the UPN environment, such as switches and routers. The rules are designed to be implemented at or near the user’s point of entry to the network. The rules are typically at Layer 2, 3, or 4 of the OSI network model.

The middle tier is Services, which allows multiple classification rules to be aggregated. Services can include e-mail and Internet access.

Roles, or Behavioral Profiles make up the top tier. The roles assign services to various business functions or departments, such as executive, sales, and engineering.

To implement most roles, UPN requires authentication such as 802.1x using EAP-TLS, EAP-TTLS, or EAP-PEAP. Authorization information, attached to the authentication response, determines the application of the UPN policy. One way to communicate the authorization information is to include the Policy Name in a RADIUS Filter-ID attribute. A UPN administrator can also define a role to be implemented in the absence of an authentication and authorization.

Refer to the release notes shipped with the module for details.

The rules can only be implemented on the Matrix system by the Enterasys NetSight Policy Manager, which is described on the web site at www.enterasys.com/netsight.

1-6Introduction

Page 24
Image 24
Enterasys Networks C1H124-24, C1H124-48 manual UPN Support

C1H124-24, C1H124-48 specifications

Enterasys Networks, a prominent player in the field of networking technology, has developed a range of innovative solutions tailored for modern enterprise demands. Among their offerings are the C1H124-48 and C1H124-24 switches, both designed to facilitate robust connectivity and superior network performance.

The Enterasys C1H124-48 is a 48-port Ethernet switch, designed to meet the needs of dense network environments. It supports a variety of Ethernet standards, making it versatile for different deployment scenarios. This model boasts advanced Layer 2 switching capabilities, ensuring that data packets are efficiently managed and routed within local networks. With support for Power over Ethernet (PoE), this switch can supply power to connected devices, such as IP phones and wireless access points, without the need for separate electrical wiring.

Conversely, the C1H124-24 is a 24-port variant that shares many features with its larger counterpart. It is ideal for smaller office environments or as part of a larger stack in complex installations. Both models support high throughput rates to handle heavy data traffic, ensuring seamless connectivity and minimal latency for end-users.

One of the key strengths of both switches is their integration of advanced security features. They support features such as VLAN tagging and Access Control Lists (ACLs), allowing network administrators to segment traffic and enforce strict security protocols. This is essential for protecting sensitive data and ensuring compliance with industry regulations.

In addition to security, the C1H124 models utilize cutting-edge technologies such as Quality of Service (QoS) to prioritize critical network applications, ensuring that bandwidth-intensive tasks like video conferencing and cloud applications receive the necessary resources. This capability is vital in modern enterprises where operational continuity depends on reliable network performance.

Additionally, Enterasys Networks emphasizes ease of management with both models. They come equipped with intuitive management interfaces and support for network management protocols, allowing for straightforward monitoring and configuration. This reduces the administrative burden on IT staff and enhances operational efficiency.

In summary, the Enterasys Networks C1H124-48 and C1H124-24 switches are well-engineered solutions that cater to a variety of networking needs. With their comprehensive feature set, including PoE support, advanced security, QoS, and user-friendly management, they are positioned to enhance network performance and security in diverse organizational settings. The decision to adopt these switches can lead to significant improvements in connectivity and overall network efficiency.