A3 v3.1.2 Installation Guide

A3 is a fully supported and trusted network access control (NAC) system. Boosting an impressive feature set including a captive portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2 isolation of problematic devices, integration with IDS, vulnerability scanners and firewalls; A3 can be used to effectively secure networks - from small to very large heterogeneous networks.

System Requirements

Minimum Hardware Requirements

The following provides a list of the minimum server hardware recommendations:

  • Intel or AMD CPU 3 GHz or faster
  • 16 GB of RAM
  • 250 GB of disk space (RAID-1 recommended)
  • 1 network card (2 recommended)

Installation

This section guides you through the installation and initial network setup of A3.

Installing A3

A3 is designed to be deployed on VMware ESX/ESXi, which is the only deployment platform that Extreme Networks currently supports. This section covers the deployment of the virtual appliance on VMware-based products.

Virtual Machine

This setup has been tested using VMWare ESXi, Fusion and Workstation products with 8 GB of RAM dedicated to the virtual machine. It might work using other VMWare products. To properly run the A3 virtual appliance, you need a CPU that supports long mode. In other words, you need to have a 64-bit capable CPU on your host. A3 comes in a pre-built virtual disk (OVF). If you are using an ESX type hypervisor, you need to import the OVF using vSphere Client (or vCenter).

Import to ESX

Make sure that there is only one virtual network card created, and also make sure that your vEthernet is connected to a virtual switch (vSwitch). That virtual network card will be used as the A3 management interface.

Import to VMWare Player/Workstation for Linux

Newer version of VMWare Player handles the VLAN trunking a lot better. Having that said, we can use a single interface on the VM. So, you need to ensure that your VM host is plugged into a physical trunk port with VLAN 1,2,3,5,10 and 200 as the allowed VLAN. These VLANs will be used later in configuration examples.

Getting Started

Now that A3 is installed, it needs to be configured. The A3 web-based configuration interface will automatically be started.

This section will guide you through configuring A3 as a simple RADIUS server. A3 will provide 802.1X support through Microsoft Active Directory and a Cisco 2960 access switch will be configured to integrate with A3. The 802.1X client will be a Microsoft Windows 7 computer, connected of course on the wired network in the Cisco 2960 access switch. The following architecture diagram shows the interconnection of all components for our example:

[image:getting-started.png]

Configuration

 


Extreme Networks Documentation PortalExtreme Networks BlogsHiveCare Community Forum

Copyright ©  Aerohive Networks, Inc.