H3C Technologies H3C Intelligent Management Center - Manual (Page 41)

23
• SSID
• Vendor
• Type
• OS
• MAC address
UAM distinguishes between smart devices and PCs, employees and visitors, and laboratories and
meeting rooms based on the access conditions.
BYOD is an indispensable part of UAM authentication architecture. As an internal processing
mechanism, BYOD does not influence users' authentication operations. Whereas, users can notice that
the access privileges are related with the scenarios.
For more information about BYOD, see "
16 Configuring MAC/BYOD authentication ."
Roaming
The roaming function is applicable to leagues, such as organization, company, and campus leagues.
You can use the roaming function together with 802.1X authentication, portal authentication, VPN
authentication, or MAC authentication.
With roaming enabled, a user can access the network without losing the connection in a location that is
different from the home location where the user was registered.
For more information about the roaming function, see "
21 Configuring roaming authentication ."
UAM authentication configuration guide
The combinations of endpoints, authentication functions, and authentication methods are simplified as
follows:
• Combinations of authentication functions and authentication methods, (for example, 802.1X
authentication and username/password authentication) do not change along with the endpoint
types.
• Certificate authentication, LDAP authentication, or RSA authentication needs additional
configurations than UAM local authentication. This example describes the differences between the
three authentication methods and UAM local authentication rather than complete certificate
authentication, LDAP authentication, and RSA authentication.
802.1X authentication and UAM local
authentication
To implement 802.1X authentication and UAM local authentication, configure the following:
• UAM
• An access device
• The endpoint (iNode client)