HP 5920 Series Configuration Manual page 4

EAP relay ································································································································································ 67
EAP termination ····················································································································································· 68
Configuring 802.1X ·················································································································································· 70
HP implementation of 802.1X ······································································································································ 70
Configuration prerequisites ··········································································································································· 70
802.1X configuration task list ······································································································································· 70
Enabling 802.1X ···························································································································································· 71
Enabling EAP relay or EAP termination ······················································································································· 71
Setting the port authorization state ······························································································································ 72
Specifying an access control method ·························································································································· 72
Setting the maximum number of concurrent 802.1X users on a port ······································································· 72
Setting the maximum number of authentication request attempts ············································································· 73
Setting the 802.1X authentication timeout timers ······································································································· 73
Configuring the online user handshake feature ·········································································································· 74
Configuring the authentication trigger feature ············································································································ 74
Configuration guidelines ······································································································································ 74
Configuration procedure ······································································································································ 74
Specifying a mandatory authentication domain on a port ························································································ 75
Configuring the quiet timer ··········································································································································· 75
Enabling the periodic online user reauthentication feature ······················································································· 76
Displaying and maintaining 802.1X ··························································································································· 76
802.1X authentication configuration example ··········································································································· 76
Network requirements ··········································································································································· 76
Configuration procedure ······································································································································ 77
Verifying the configuration ··································································································································· 78
Configuring MAC authentication ······························································································································ 79
Overview ········································································································································································· 79
User account policies ············································································································································ 79
Authentication methods········································································································································· 79
Configuration prerequisites ··········································································································································· 80
Configuration task list ···················································································································································· 80
Enabling MAC authentication ······································································································································ 80
Specifying a MAC authentication domain ·················································································································· 81
Configuring the user account format ···························································································································· 81
Configuring MAC authentication timers ······················································································································ 82
Setting the maximum number of concurrent MAC authentication users on a port ·················································· 82
Configuring MAC authentication delay ······················································································································· 83
Displaying and maintaining MAC authentication ······································································································ 83
MAC authentication configuration examples ·············································································································· 84
Local MAC authentication configuration example····························································································· 84
RADIUS-based MAC authentication configuration example············································································· 85
Configuring portal authentication ····························································································································· 88
Overview ········································································································································································· 88
Extended portal functions ····································································································································· 88
Portal system components ····································································································································· 89
Interaction between portal system components ·································································································· 90
Portal authentication modes ································································································································· 90
Portal authentication process ······························································································································· 91
Portal configuration task list ·········································································································································· 93
Configuration prerequisites ··········································································································································· 94
Configuring a portal authentication server·················································································································· 94
Configuring a portal Web server ································································································································· 95
Enabling portal authentication on an interface ··········································································································· 95
ii