Release Notes:
ProCurve Identity Driven Manager
Version 1.0

These release notes include information on the following:

NOTE: These Release Notes are applicable at the date the ProCurve Identity Driven Manager Version 1.0 Release CD is created. Please check the ProCurve Support web site for more recent information.

 

IDM Features

Identity Driven Manager 1.0 is an application for ProCurve Manager Plus that automatically manages intelligent network access, applying security and performance settings to network infrastructure devices based on user, location and time. This enables central definition of policies that are then enforced at the edge by ProCurve devices.

Below is a summary of the features that are available in ProCurve Identity Driven Manager (IDM) with this release. Please refer to the ProCurve Identity Driven Manager User's Guide for a full description on the use of these features:

Installation Notes – IDM 1.0 Standalone version

Minimum System Requirements

  • 2 GHz Intel Pentium IV or equivalent
  • 1 GB RAM
  • 500 MB free hard disk space

Recommended System Requirements

  • 3 GHz Intel Pentium IV or equivalent
  • 2 GB RAM
  • 500 MB free hard disk space

Additional processing power and disk space may be required for larger networks and to support extensive session monitoring

Other Operating Requirements

  • Implementation of Microsoft’s Internet Authentication Service (IAS) RADIUS authentication server on Windows 2003 Server (Enterprise or Standard Edition). The IDM agent will be installed on this system.
  • Implementation of an access control method, using either an 802.1x supplicant application, MAC-authorization, or Web-authourization.
  • ProCurve Manager Plus software must be installed for IDM to operate. The IDM software cannot be installed as a stand-alone application.

Supported Operating Systems for PCM and IDM Remote Client:

  • MS Windows 2000
  • MS Windows 2000 Server, Advanced Server or Professional with SP 4 or better
  • MS Windows XP Professional (SP 1 or greater)
  • MS Windows 2003 Server or Enterprise Edition

Installing the IDM Application

To install the IDM application components, select the IDM option from the installation script provided on the ProCurve Manager Plus Release 1.6 CD. The installation wizard will guide you through the installation process.

To install the IDM Agent on a RADIUS server:

You must configure "Client/Server" access permissions on the PCM server to allow the RADIUS server to communicate with IDM. This is done by adding the IP address of the RADIUS server to the access.txt file on the PCM server. For details, refer to the ProCurve Manager Getting Started Guide, under "Configuring Client/Server Access Permissions."

Open a Web browser window on the RADIUS server and for the URL, type in the IP address of the PCM server computer, followed by a colon and the port ID 8040.
For example, if the IP address of the PCM server is 10.15.20.25, then on the RADIUS server, enter http://10.15.20.25:8040 on the web browser address line.
In the install scripts page that appears, select the IDM Agent to download it to the RADIUS server system.
Run the Install.exe that is downloaded to the RADIUS server. The Install Wizard guides you through the installation process. During installation you will be prompted to enter the IP Address of the IDM Server, which is the same as the PCM Server.

You cannot install the IDM Agent on a system without the RADIUS server. Also, if the IP address of the RADIUS server is not in the access.txt file on the PCM server, you will get an alert message during the IDM Agent install.

 

Known Issues

User and Session Accounting

  • The IDM application is designed to support RADIUS server implementation with 802.1x using supplicants, as well as Web-auth and MAC-auth. However, if you use Web-auth or MAC-auth, the user session accounting will not work. This is because current version of Web-Auth and MAC-auth do not support session accounting features on the ProCurve devices. If you are using Web-auth or MAC-auth, it is best to turn off session accounting. See “IDM Preferences” on page 2-14 of the ProCurve Identity Driven Manager User's Guide for details.
  • For installations with large numbers of users, with frequent logins, you can reduce the number of incoming events in the IDM event browser by turning off the logging of session start and stop events. This will have no effect on session accounting, and you will still receive 'User Login' events.
    The effect will be to reduce the number of events that arrive in the event browser, and will to reduce the overhead in the IDM GUI.

 

© Copyright 2004 Hewlett-Packard Development Company, L.P.
All Rights Reserved.

This document contains information which is protected by copyright. Reproduction, adaptation, or translation without prior permission is prohibited, except as allowed under the copyright laws.

Publication Number

November, 2004
Edition 1.0

Part #5990-8875

Trademark Credits

Microsoft, Windows, Windows 95, and Microsoft Windows NT are registered trademarks of Microsoft Corporation. Internet Explorer is a trademark of Microsoft Corporation.
Ethernet is a registered trademark of Xerox Corporation.
Netscape is a registered trademark of Netscape Corporation. Cisco® is a trademark of Cisco Systems, Inc.

Disclaimer

The information contained in this document is subject to change without notice.

HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.

Hewlett-Packard assumes no responsibility for the use or reliability of its software on equipment that is not furnished by Hewlett-Packard.

Warranty

See the Customer Support/Warranty booklet included with the product.

A copy of the specific warranty terms applicable to your Hewlett-Packard products and replacement parts can be obtained from your HP Sales and Service Office or authorized dealer.

Hewlett-Packard Company
8000 Foothills Blvd, m/s 5551
Roseville, CA 95747-5551
http://www.hp.com/go/hpprocurve