2-12 802.1X-Based EAD Fast Deployment ConfigurationWhen configuring EAD fast deployment, go to these sections for information you are interested in:z EAD Fast Deployment Overviewz Configuring EAD Fast Deploymentz Displaying and Maintaining EAD Fast Deploymentz EAD Fast Deployment Configuration Examplez Troubleshooting EAD Fast DeploymentEAD Fast Deployment OverviewEndpoint Admission Defense (EAD) is an integrated endpoint access control solution. By allowing thesecurity clients, access devices, security policy servers, and third-party servers in the network tocollaborate with each other, it can improve the overall defense capability of a network and implementcentralized management of users.Normally, to use EAD on your network, you need to manually deploy the EAD client on each device,which tends to be time consuming and inefficient. To address the issue, quick EAD deployment wasdeveloped. In conjunction with 802.1X, it can have an access switch to force all attached devices todownload and install the EAD client before permitting them to access the network.EAD Fast Deployment ImplementationTo support the fast deployment of EAD schemes, 802.1X provides the following two mechanisms:1) Limit on accessible network resourcesBefore successful 802.1X authentication, a user can access only a specific IP segment, which mayhave one or more servers. Users can download EAD client software or obtain dynamic IP address fromthe servers.2) URL redirectionBefore successful 802.1X authentication, a user using a Web browser to access the network isautomatically redirected to a specified URL, for example, the EAD client software download page. Theserver that provides the URL redirection must be in the specific network segment that users can accessbefore passing 802.1X authentication.Configuring EAD Fast Deployment
