UAC DHCP Server

[jeniferdcosta_]

Hello,

New Project to configure UAC,

Questions:

1. Can UAC acts as a DHCP Server
2. Can anybody provide me with the Complete software configuration guide of UAC that will provide me from start to end information.(such as Cisco)
3. What is infrared controller in Juniper networks

Tx

[Stanislas P_]

Hello,

UAC can act as:

- Network access : 802.1X enforcement

- Infranet Enforcer : Layer 3 enforcement with a Juniper SRX or SSG/ISG firewall as enforcer

- Host enforcer : Local Layer 3 enforcement by.the Oddyssey client

The Infranet Controler is the Policy decision point of UAC.it act as Radius server for 802.1X, captive portal and for Layer 3 enforcement.

you can download the quick start guide here : http://www.juniper.net/techpubs/software/uac/4.1xguides/j-ic-uac-4.1-quickstart.pdf

Regards,

Stanislas

[jeniferdcosta_]

hello,

After conforming that switch port is compliant with 802.1X, the system will move to get the IP address from the DHCP server, to protect this DHCP server in security zone from security risk, can infranet controller / enforcer can act as a DHCP server. I m using the concept of Cisco NAC,

if i m wrong please write steps for me, when the user start his PC

1. ??????
2. ??????

[Stanislas P_ · Accepted solution]

Hello,

in a UAC architecture, you will install IC (Infranet Controller) in a network available from Switchs and users.

If you need to compare UAC with Cisco NAc appliance:

• IC is the Policy decision point as Cisco NAC Manager
• In a layer 3 configuration, Infranet enforcer is the Policy enforcement point as Cisco NAC Server

The Infranet enforcer (Juniper firewalls) can act as DHCP server, but in most cases, you do not need it.

In a 802.1x only configuration, the differents steps are:

1. The switch initiate authentication between hosts and IC. IC push VLAN associated with User identity, Host checker results and Switch location.
2. the host receive the authentication response and the IP address of the IC
3. the host request a DHCP address
4. the router receive the request, redirect it to the DHCP server defined in its configuration (DHCP Helper)
5. the host connect to the IC through HTTPS for real time host checker

Regards,

Stanislas