No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


S600-E V200R013C00 Configuration Guide - User Access and Authentication

This document describes the configurations of User Access and Authentication Configuration, including AAA, NAC, and Policy Association.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Application Scenarios for Policy Association

Application Scenarios for Policy Association

To control and manage access users, NAC authentication and user access policies need to be deployed for access control. Large campus networks have many widely distributed access devices. If NAC authentication and user access policies are deployed on each access device, the huge workload and inflexible policy adjustment cause contradiction between policy strengths and complexity. To resolve this problem, deploy policy association to implement centralized policy control and distributed policy execution, as shown in Figure 4-3.

Figure 4-3  Deploying policy association on large campus networks

The gateway functions as the control device, on which NAC authentication and user access policies are deployed in a centralized manner. In this way, the same configuration does not need to be performed on each access device, which simplifies the device configuration and management. The control device and access devices use CAPWAP tunnels to communicate with each other. The control device authenticates users and controls network access policies for users, while the access devices carry out these network access policies.

Updated: 2019-04-20

Document ID: EDOC1100066170

Views: 27736

Downloads: 7

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Previous Next