Management and Configuration Guide (Includes ACM xl) 2005-12

ProCurve Secure Access 700wl Series Management and Configuration Guide 2-3
Using the 700wl Series System
users, creating or modifying Access Policies, modifying the Rights Table, setting up Authentication
Services or Authentication Policies, or other similar functions. A Network Administrator can view
all the pages in the Status and Logs areas.
•A
Policy Administrator can perform functions under the Rights Manager, such as adding and
removing users, configuring Authentication, setting up Identity Profiles, Connection Profiles, and
Access Policies, and manipulating the Rights Assignment Table. A Policy Administrator cannot
modify any of the network configuration parameters, or perform system software updates, backups,
or restarts. A Policy Administrator can view all the pages in the Status and Logs areas.
•A
Super Administrator can perform all the administrative functions for all connected components of
a 700wl Series system—both network and rights configuration. In addition, a Super Administrator
can add, delete, enable, and disable other administrator.
There is one built-in administrator that has Super Administrator capabilities. This is the only
administrator that exists on a new unit. While all other administrator settings are maintained in the
700wl Series system database, and thus are deleted if the system is reset to factory defaults, the
built-in administrator simply has its name and password reset to the default. The built-in
administrator logon cannot be deleted.
The built-in administrator name and password can be changed on the System Components Edit
page for an individual system component. For information about creating additional administrator
accounts, see “Setting Up Administrators” on page 6-44.
Centralized Administration
Wireless network clients connect through an Access Controller, but authentication and rights
administration for these clients is handled centrally from the Access Control Server. In addition, all
configuration of the Access Control Server and all Access Controllers connected to the 700wl Series
system is handled through the Administrative Interface running on the Access Control Server. Once
you have installed an Access Controller on your network following the instructions in the 700wl Series
system Quick Start Guide, all other administration on the Access Controller is handled through the
Access Control Server.
From the centralized Administrative Interface on your Access Control Server you can perform the
following functions:
• Monitor in real-time the status of all the 700wl Series system components
• Monitor in real-time the status of all clients logged onto the system, and monitor the status of all
their sessions
• View the 700wl Series system logs
• Update access rights for clients in real-time
• Log clients out of the system
• Configure advanced network settings for 700wl Series system components, including bridging,
DHCP addressing for use with NAT, IP broadcast forwarding, setting up HTTP proxies,
configuring SNMP settings, and setting the system date and time
• Enable or disable Wireless Data Privacy protocols, configuring the address method and range for
VPN tunneling, and configuring IPSec parameters
• Update the 700wl Series system software
• Back up a 700wl Series system component’s configuration, and restore the backup if needed
• Set up Connection Profiles that identify where and when clients connect to the 700wl Series system