HP Access Control Client Software manual Fully Integrated Combination, PEPs with Built-in PDPs

Designing Access Controls

Choose RADIUS Servers

■Integrated server/proxy to turnkey server—RADIUS servers are built in to PEPs. The built-in RADIUS servers proxy requests to one or more external RADIUS servers, which store all credentials and policies. IDM is a good option for configuring policies on the turnkey RADIUS server. Again, IDM can manage credentials for NAC 800s only.

Table 3-59. Integrated Server/Proxy to Turnkey Server Combination

PEPs with Built-in PDPs		Proxy PDP with Policy/Credential Repository
•	AP 530	•	Software RADIUS server using a local
•	Wireless Edge Services Module		credential database and managed by IDM
		•	NAC 800 managed by IDM

■Fully integrated—Endpoints connect to PEPs, each of which includes a built-in RADIUS server and stores all credentials and policies locally.

Table 3-60. Fully Integrated Combination

PEPs with Built-in PDPs and Policy/Credential Repositories

•AP 530 (up to 100 users)

•Wireless Edge Services Module (up to 500 users)

Note that the integrated server options can combine with the general option to accommodate PEPs that do not include built-in servers.

Table 3-61. Alternate Integrated Server/Proxy Combination

PEPs (Optional)		PEPs with built-in		Proxy PDPs		Policy/Credential
		PDPs				Repository
•	Switch	•	AP 530	•	Software RADIUS	Directory service
•	AP	•	Wireless Edge		server
			Services Module	•	NAC 800

Table 3-62. Alternate Integrated Server/Proxy to Turnkey Server Combination

PEPs (Optional)		PEPs with Built-in PDPs		Proxy PDP with Policy/
				Credential Repository
•	Switch	•	AP 530	•	Software RADIUS server
•	AP	•	Wireless Edge Services		managed by IDM
			Module	•	NAC 800 managed by IDM

You can now consider the best choices for your environment:

1.How many users do you have in your network?

3-81