To Next Page

To Previous Page

7-32

Configuring RADIUS Server Support for Switch Services

Configuring and Using Dynamic (RADIUS-Assigned) Access Control Lists

Note For information on syntax details for RADIUS-assigned ACLs, refer to the next

section.

Figure 7-8. Example of Configuring a FreeRADIUS Server To Filter IPv4 and IPv6 Traffic for a Client Using the

Correct Username and Password Credentials.

Admin01 Auth-Type:= Local, User-Password == myAuth9

HP-Nas-Rules-IPv6 = 1,

Nas-filter-rule = “permit in tcp from any to FE80::a40 80”,

Nas-filter-rule += “deny in tcp from any to ::/0 80”,

Nas-filter-rule += “permit in tcp from any to 10.10.10.117 80”,

Nas-filter-rule += “deny in tcp from any to 0.0.0.0/0 80”,

Nas-filter-rule += “deny in tcp from any to any 23”,

Nas-filter-rule += “permit in ip from any to any”

Client’s Username (802.1X or Web Authentication)

Client’s Password (802.1X or Web Authentication)

In an ACL that filters both IP and IPv6 traffic

type, the any keyword used for a destination

includes both IPv4 and IPv6 traffic. As a result,

this ACE denies Telnet traffic from the client to

any IPv4 or IPv6 address.

IPv6 VSA for the standard attribute-92.

HP J8698A User Manual

Other manuals for HP J8698A