Configuring The Switch To Access A Radius Server - HP ProCurve 6200yl Series Access Security Manual

Web and MAC Authentication

Configuring the Switch To Access a RADIUS Server

N o t e o n M A C
A d d r e s s e s
4-14
Configure the client device's (hexadecimal) MAC address as both
■
username and password. Be careful to configure the switch to use the
same format that the RADIUS server uses. Otherwise, the server will
deny access. The switch provides four format options:
aabbccddeeff (the default format)
aabbcc-ddeeff
aa-bb-cc-dd-ee-ff
aa:bb:cc:dd:ee:ff
Letters in MAC addresses must be in lowercase.
■ If the device is a switch or other VLAN-capable device, use the base
MAC address assigned to the device, and not the MAC address
assigned to the VLAN through which the device communicates with
the authenticator switch. Note that the switch applies a single MAC
address to all VLANs configured in the switch. Thus, for a given
switch, the MAC address is the same for all VLANs configured on the
switch. (Refer to the chapter titled "Static Virtual LANs (VLANs)" in
the Advanced Traffic Management Guide for your switch.)
Configuring the Switch To Access a
RADIUS Server
RADIUS Server Configuration Commands
radius-server
i
[host < p-address>]
[key < global-key-string >]
i
radius-server host < p-address> key <server-specific key-string>
This section describes the minimal commands for configuring a RADIUS
server to support Web-Auth and MAC Auth. For information on other RADIUS
command options, refer to chapter 6, "RADIUS Authentication and Account­
ing" .
below
below
4-15