No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S600-E V200R013C00 Web-based Configuration Guide

This document describes how to configure and maintain devices through the web NMS client, including device status statistics, SVF, interface, Ethernet switching, IP service, IP routing, security, ACL, AAA, system management, QoS, diagnosis service, and EasyDeploy.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Connecting to Aruba ClearPass

Connecting to Aruba ClearPass

Procedure

  1. Choose Configuration > Advanced Services > Connecting to Aruba ClearPass. The configuration page is displayed, as shown in Figure 5-44.

    Figure 5-44  Connecting a switch to ClearPass

  2. In the Select Authentication Interfaces area, select interfaces for authentication configuration by performing any of the following operations based on actual requirements:

    • Click an interface icon to select an interface. You can click the icon again to deselect the interface.
    • Drag the mouse to select continuous interfaces in batches.
    • Click multiple interface icons to select them. You can click a certain icon again to deselect the interface.

  3. (Optional) To clear the existing authentication configuration on an interface, select the interface and click Clear Interface Authentication Configuration.

    To clear all authentication configurations on the device, click Clear Authentication Configuration.

  4. In the Authentication Configuration area, set authentication parameters by referring to Table 5-24.

    Table 5-24  Authentication parameters

    Parameter

    Description

    ClearPass server IP address

    IPv4 address of the ClearPass server.

    Secondary server IP address

    Backup IPv4 address of the ClearPass server.

    Shared key

    Shared key of the ClearPass server.

    Authentication server port

    Authentication port number of the ClearPass server.

    Secondary authentication port

    Backup authentication port number of the ClearPass server.

    Accounting server port

    Accounting port number of the ClearPass server.

    Secondary accounting port

    Backup accounting port number of the ClearPass server.

    Authentication/Accounting mode

    Authentication and accounting mode.

    Permit before authentication

    Configure an authentication-free rule.

  5. Select Permit before authentication. The Permit Rules area is displayed, as shown in Figure 5-45.

    Figure 5-45  Configuring an authentication-free rule

  6. Click Create. The Create Permit Rule dialog box is displayed, as shown in Figure 5-46.

    Figure 5-46  Creating an authentication-free rule

    Table 5-25 describes parameters in the Create Permit Rule dialog box.

    Table 5-25  Authentication-free rule parameters

    Parameter

    Description

    Rule ID

    ID of an authentication-free rule.

    Source

    IP address of a user who can access some resources before being authenticated.

    • - None -
    • All IP address
    • Specified

    All users can access when Source is set to Authentication-free.

    Source IP address Source IP address.

    This parameter is configurable only when the Source is set to Specified.

    Mask Mask of the source IP address.

    This parameter is configurable only when the Source is set to Specified.

    VLAN VLAN ID of source packets.

    This parameter is configurable only when the Source is set to All IP address or Specified.

    Destination

    Destination network resource that a user can access without authentication.

    • - None -
    • All IP address
    • Specified

    Destination network resource that a user can access without authentication when Destination is set to Authentication-free.

    Destination IP address Destination IP address.

    This parameter is configurable only when the Destination is set to Specified.

    Mask Mask of the destination IP address.

    This parameter is configurable only when the Destination is set to Specified.

    Protocol type Protocol used by users to access all destination network resources without authentication.

    This parameter is configurable only when the Destination is set to Specified.

    Destination port number UDP or TCP destination port number.

    This parameter is configurable only when the Destination is set to Specified.

  7. Click OK.
  8. Click Apply to complete the configuration.
Translation
Download
Updated: 2019-04-08

Document ID: EDOC1100066172

Views: 7212

Downloads: 11

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next