HP FlexFabric 5700 Series Security Configuration Manual page 411

[Switch-luser-network-usera] quit
# Add local user userb.
[Switch] local-user userb class network
New local user added.
# Set the password of local user userb to b12345 in plain text.
[Switch-luser-network-userb] password simple b12345
# Specify the service type as lan-access for userb.
[Switch-luser-network-userb] service-type lan-access
# Configure the authorization user profile as userb.
[Switch -luser-network-userb] authorization-attribute user-profile userb
[Switch -luser-network-userb] quit
# Add local user userc.
[Switch] local-user userc class network
New local user added.
# Set the password of local user userc to c12345 in plain text.
[Switch-luser-network-userc] password simple c12345
# Specify the service type as lan-access for userc.
[Switch-luser-network-userc] service-type lan-access
# Configure the authorization user profile as userc.
[Switch-luser-network-userc] authorization-attribute user-profile userc
[Switch-luser-network-userc] quit
8. Configure the authentication, authorization, and accounting method for local users:
# Configure ISP domain user to use local authentication and authorization without accounting for
local users.
[Switch] domain user
[Switch-isp-user] authentication lan-access local
[Switch-isp-user] authorization lan-access local
[Switch-isp-user] accounting login none
[Switch-isp-user] quit
9. Configure 802.1X:
# Enable 802.1X on Ten-GigabitEthernet 1/0/1.
[Switch] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] dot1x
# Configure Ten-GigabitEthernet 1/0/1 to implement MAC-based access control (the default).
[Switch-Ten-GigabitEthernet1/0/1] dot1x port-method macbased
[Switch-Ten-GigabitEthernet1/0/1] quit
# Enable 802.1X globally.
[Switch] dot1x
Verifying the configuration
# Use the correct usernames and passwords to access the network from User A, User B, and User C. A
username must include the ISP domain name. For example, enter username usera@user and password
a12345 for User A.
# Verify that the user profiles are active for User A, User B, and User C.
<Switch> display user-profile
399