Configuration Examples; 802.1X Configuration Example - HP 1910 User Manual

Configuration examples

802.1X configuration example

Network requirements
As shown in
GigabitEthernet 1/0/1. Implement MAC-based access control on the port, so the logoff of one user does
not affect other online 802.1X users. Enable periodic re-authentication of online users on the port, so that
the server can periodically update the authorization information of the users.
Use RADIUS servers to perform authentication, authorization, and accounting for the 802.1X users. If
RADIUS accounting fails, the access device logs the user off. The RADIUS servers run CAMS or IMC.
Configure the host at 10.1.1.1 as the primary authentication and secondary accounting servers, and the
host at 10.1.1.2 as the secondary authentication and primary accounting servers. Assign all users to the
ISP domain test.
Configure the shared key as name for packets between the access device and the authentication server,
and the shared key as money for packets between the access device and the accounting server.
Exclude the ISP domain name from the username sent to the RADIUS servers.
Specify the device to try up to five times at an interval of 5 seconds in transmitting a packet to the RADIUS
server until it receives a response from the server, and to send real time accounting packets to the
accounting server every 15 minutes.
Figure 327 Network diagram
The following configuration procedure covers RADIUS client configuration on the switch, and
configurations on the RADIUS servers are not shown. For more information about RADIUS configuration,
see "Configuring
Configuring the IP addresses of the interfaces
Details not shown.
Configuring 802.1X
From the navigation tree, select Authentication > 802.1X.
1.
Select the Enable 802.1X box, select the authentication method as CHAP, and click Apply.
2.
Figure 327, the access device performs 802.1X authentication for users that connect to port
RADIUS."
318