760wl 2004-03

Basic Configuration

Step 2. Directly connect a Windows client system to the 700wl Series system through a downlink port of

the Access Controller 720wl (or Integrated Access Manager 760wl).

Step 3. Log the user on using the default browser-based logon page.

The user should have full IP access to the network. This shows that the user can successfully

connect to the system and gain network access.

Step 4. Configure the 700wl Series system to act as a VPN gateway using PPTP encryption.

Step 5. Configure the Windows client to establish a PPTP connection with the 700wl Series system.

Step 6. Connect the client to the 700wl Series system using the PPTP connection process.

The user should have full IP access to the network. Again this shows that the client can connect to

the system and gain access to the network.

Step 7. (Optional) Configure the 700wl Series system to use a RADIUS server for user authentication.

Step 8. (Optional) Verify that the RADIUS Authentication Service is set up correctly using the Trace

Transaction

feature.

Step 9. (Optional) Log on using a user account known to the RADIUS authentication server, and verify

network access.

The following procedures can be performed using either an Access Control Server 740wl and an Access

Controller 720wl, or using a single Integrated Access Manager 760wl. The instructions are written as if an

Access Control Server and a separate Access Controller are being used. If you are using an Integrated

Access Manager, you perform the steps for both the Access Control Server and Access Controller on the

same physical unit.

Preparation

Before you begin the system configuration process, review the following list to make sure you have the

required components available and/or configured as specified:

• A management workstation running the Windows IE 6 or Netscape 7.1 browser, to be used to perform

configuration tasks on the 700wl Series system.

• One Windows-based PC or Laptop preset to obtain an IP address automatically (via DHCP). This

system will be used to function as a client once the configuration is complete.

• One standard (straight-through) Ethernet cable to connect the PC/laptop to a downlink port on the

Access Controller or Integrated Access Manager.

• (Optional) One RADIUS Server. You must configure the RADIUS server to accept authentication

requests from the Access Control Server 740wl, which acts as a RADIUS client. A user account must be

created in the RADIUS database. Please consult the online Help or the HP ProCurve Secure Access 700wl

Series Management and Configuration Guide for more information on other supported external

authentication servers.

Note: If you want to use the same PC or laptop as both the management station and a demonstration

client, you will need to alternately connect it either to the network (for use as a management station) or

to a downlink port on the Access Controller or Integrated Access Manager (for use as a client). You will

also need to force a renewal of your IP configuration each time you move from one connection to the

other.

4-2 HP ProCurve Secure Access 700wl Series Installation and Getting Started Guide