Configuration Guide Configuring SCC
12 Configuring SCC
12.1 Overview
The Security Control Center (SCC) provides common configuration methods and policy integration for various access control
and network security services, so that these access control and network security services can coexist on one device to meet
diversified access and security control requirements in various scenarios.
Typical access control services are dot1x, Web authentication, Address Resolution Protocol (ARP) check, and IP Source
Guard. The network security services include Access Control List (ACL), Network Foundation Protection Policy (NFPP), and
anti-ARP gateway spoofing. When two or more access control or network security services are simultaneously enabled on
the device, or when both access control and network security services are simultaneously enabled on the device, the SCC
coordinates the coexistence of these services according to relevant policies.
For details about the access control and network security services, see the related configuration guide. This document
describes the SCC only.
Protocol and Standards
None
12.2 Application
Access Control of Extended Layer 2
Campus Networks
Students on a campus network can access the Internet based on dot1x client
authentication or Web authentication. ARP spoofing between the students should be
prevented. In addition, terminal devices in some departments (such as the
headmaster's office) can access the Internet without authentication.
12.2.1 Access Control of Extended Layer 2 Campus Networks
Scenario
Students on a campus network of a university usually need to be authenticated through the dot1x client or Web before
accessing the Internet, so as to facilitate accounting and guarantee the benefits of the university.
The students can access the Internet through dot1x client authentication or Web authentication.
ARP spoofing between the students is prevented, so as to guarantee the stability of the network.
Terminal devices in some departments (such as the headmaster's office) can access the Internet without
authentication.
Figure 12-1
To Next Page
Loading...
Need help?
General
