No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


S600-E V200R010C00 Configuration Guide - User Access and Authentication

This document describes the working mechanisms, configuration procedures, and configuration examples of User Access and Authentication features, such as AAA, NAC, and Policy Association.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Application Scenarios for Policy Association

Application Scenarios for Policy Association

To control and manage access users, NAC authentication and user access policies need to be deployed for access control. Large campus networks have many widely distributed access devices. If NAC authentication and user access policies are deployed on each access device, the huge workload and inflexible policy adjustment cause contradiction between policy strengths and complexity. To resolve this problem, deploy policy association to implement centralized policy control and distributed policy execution, as shown in Figure 4-3.

Figure 4-3  Deploying policy association on large campus networks

The gateway functions as the control device, on which NAC authentication and user access policies are deployed in a centralized manner. In this way, the same configuration does not need to be performed on each access device, which simplifies the device configuration and management. The control device and access devices use CAPWAP tunnels to communicate with each other. The control device authenticates users and controls network access policies for users, while the access devices carry out these network access policies.

Updated: 2019-08-21

Document ID: EDOC1000141885

Views: 54699

Downloads: 10

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next