HP 1910 User Manual page 10

Configuring 802.1X ··············································································································································· 302
Overview ······································································································································································· 302
802.1X architecture ············································································································································ 302
Access control methods ······································································································································ 302
Controlled/uncontrolled port and port authorization status ··········································································· 303
802.1X-related protocols ···································································································································· 303
Packet formats ······················································································································································ 304
EAP over RADIUS ················································································································································ 305
Initiating 802.1X authentication ························································································································ 305
802.1X authentication procedures ···················································································································· 306
802.1X timers ······················································································································································ 310
Using 802.1X authentication with other features ···························································································· 311
Configuration prerequisites ········································································································································· 313
Recommended configuration procedure···················································································································· 313
Configuring 802.1X globally ····································································································································· 313
Configuring 802.1X on a port ··································································································································· 315
Configuration guidelines ···································································································································· 315
Configuration procedure ···································································································································· 315
Configuring an 802.1X guest VLAN ················································································································· 317
Configuring an Auth-Fail VLAN ························································································································· 317
Configuration examples ·············································································································································· 318
802.1X configuration example ·························································································································· 318
ACL assignment configuration example············································································································ 324
Configuring AAA ···················································································································································· 333
AAA overview ······························································································································································ 333
Recommended AAA configuration procedure ·········································································································· 334
Configuring an ISP domain ········································································································································· 335
Configuring authentication methods for the ISP domain ························································································· 336
Configuring authorization methods for the ISP domain ··························································································· 337
Configuring accounting methods for the ISP domain ······························································································· 339
AAA configuration example ······································································································································· 340
Configuring portal authentication ·························································································································· 345
Overview ······································································································································································· 345
Extended portal functions ··································································································································· 345
Portal system components ··································································································································· 345
Portal system using the local portal server ········································································································ 347
Portal authentication modes ······························································································································· 348
Portal support for EAP ········································································································································· 348
Layer 2 portal authentication process ··············································································································· 349
Layer 3 portal authentication process ··············································································································· 350
Configuring portal authentication ······························································································································ 352
Configuration prerequisites ································································································································ 352
Configuration task list ········································································································································· 353
Configuring the Layer 2 portal service ·············································································································· 354
Configuring the Layer 3 portal service ·············································································································· 356
Configuring advanced parameters for portal authentication ········································································· 359
Configuring a portal-free rule····························································································································· 361
Portal authentication configuration examples ··········································································································· 362
Configuring direct portal authentication ··········································································································· 362
Configuring cross-subnet portal authentication ································································································ 367
Configuring RADIUS ··············································································································································· 374
Overview ······································································································································································· 374
Client/Server model ············································································································································ 374
viii