HP ProCurve 3400cl-24G Access Security Guide

RADIUS Authentication and Accounting
Configuring a RADIUS Server To Specify Per-Port CoS and Rate-Limiting Services
Note If a RADIUS-based ACL permits an authenticated client’s inbound IP packet,
but the client port belongs to a VLAN for which there is an inbound, VLAN-
based ACL configured on the switch, then the packet will also be filtered by
the VLAN-based ACL.
match?
No
No
licit
).
End
i
in Nth ACE.
match?
No
End
i
i i
impl
i l
l
poi
li
Is there a
Perform action
(permit or deny).
Test packet against
criteria in first ACE.
Yes
Yes
Deny the packet
(invoke imp
deny any
End
Perform action
(permit or deny).
End
Test the packet against
cr teria in second ACE.
Is there a
match?
Test packet against
criteria
Is there a
Yes
Perform action
(permit or deny).
1. If a match is not found with
the first ACE in an ACL, the
switch proceeds to the next
ACE and so on.
2. If a match with an explicit
ACE is subsequently found,
the packet is either permit-
ted (forwarded) or denied
(dropped), depending on
the action specified in the
matching ACE. In this case
the switch gnores all sub-
sequent ACEs in the ACL.
3. If a match is not found with
any explic t ACE n the ACL,
the switch invokes the
icit deny IP any at the
end of every ACL, and
drops the packet.
Note: If the l st inc udes a
permit IP any entry, no
packets can reach the
implicit deny IP any at the
end of the list. A so, a
permit IP any ACE at any
nt in an ACL defeats the
purpose of any subsequent
ACEs in the st.
Figure 6-11. The Packet-Filtering Process in an ACL with N Entries (ACEs)
6-31

HP ProCurve 3400cl-24G Specifications

General

Brand	HP
Model	ProCurve 3400cl-24G
Category	Switch
Language	English