H3C Technologies H3C Intelligent Management Center - Manual (Page 149)

133
6 Managing hierarchical EAD networks
Hierarchical management applies to large-scale organizations and their branches for central
management on user access and endpoint security.
In the hierarchical management module, a network management station deployed with IMC PLAT, IMC
UAM, and IMC EAD is a node. A hierarchical EAD network typically sets the headquarters as the root
node and its branches as subordinate nodes. The subordinate nodes form parent-child relationships with
other nodes in the hierarchy.
Hierarchical management requires the operator to establish trust relationships among the parent node
and child nodes first. With hierarchical management, the parent node can deploy services, security
policies, and EAD service parameters to its child nodes, and child nodes report security data to its parent
node.
NOTE:
Hierarchical management applies only to the EAD networks of PCs.
Configuring the policy management mode
EAD supports the following policy management modes:
• Centralized policy management—Uses a central EAD server located at the headquarters to deploy
security policies and services to every branch EAD server. The branch EAD servers use the deployed
security policies to control security check for access users and to report security data to the central
EAD server. Operators can view the security statistics report for the entire organization from the
central EAD server.
• Non-centralized policy management—Allows branches to define their access services and security
policies and to report data to the central EAD server. Operators can view the security statistics
report for every branch from the central EAD server.
To configure the policy management mode:
1. Click the User tab.
2. From the navigation tree, select User Security Policy > Service Parameters > System Settings.
3. Select Yes or No for Centralized Policy Management.
4. Click OK.
NOTE:
The policy management mode configuration takes effect only on the current node and its child nodes. To
modify the policy management mode for the current node, first delete all its child nodes first.