HP 3600 v2 Series Configuration Manual page 4

802.1X authentication procedures ······························································································································ 69
A comparison of EAP relay and EAP termination ······························································································ 70
EAP relay ································································································································································ 70
EAP termination ····················································································································································· 73
Configuring 802.1X ·················································································································································· 74
HP implementation of 802.1X ······································································································································ 74
Access control methods ········································································································································ 74
Using 802.1X authentication with other features ······························································································ 74
Configuration prerequisites ··········································································································································· 80
802.1X configuration task list ······································································································································· 80
Enabling 802.1X ···························································································································································· 81
Configuration guidelines ······································································································································ 81
Configuration procedure ······································································································································ 81
Enabling EAP relay or EAP termination ······················································································································· 81
Setting the port authorization state ······························································································································ 82
Specifying an access control method ·························································································································· 83
Setting the maximum number of concurrent 802.1X users on a port ······································································· 83
Setting the maximum number of authentication request attempts ············································································· 84
Setting the 802.1X authentication timeout timers ······································································································· 84
Configuring the online user handshake function ········································································································ 84
Configuration guidelines ······································································································································ 85
Configuration procedure ······································································································································ 85
Configuring the authentication trigger function ·········································································································· 85
Configuration guidelines ······································································································································ 86
Configuration procedure ······································································································································ 86
Specifying a mandatory authentication domain on a port ························································································ 86
Configuring the quiet timer ··········································································································································· 87
Enabling the periodic online user re-authentication function ····················································································· 87
Configuration guidelines ······································································································································ 87
Configuration procedure ······································································································································ 88
Configuring a port to send EAPOL frames untagged ································································································· 88
Setting the maximum number of 802.1X authentication attempts for MAC authentication users ························· 88
Configuring a VLAN group ··········································································································································· 89
Configuring an 802.1X guest VLAN ··························································································································· 89
Configuration guidelines ······································································································································ 89
Configuration prerequisites ·································································································································· 90
Configuration procedure ······································································································································ 90
Configuring an 802.1X Auth-Fail VLAN ······················································································································ 91
Configuration guidelines ······································································································································ 91
Configuration prerequisites ·································································································································· 91
Configuration procedure ······································································································································ 91
Configuring an 802.1X critical VLAN ························································································································· 92
Configuration guidelines ······································································································································ 92
Configuration prerequisites ·································································································································· 92
Configuration procedure ······································································································································ 92
Specifying supported domain name delimiters ··········································································································· 93
Configuring an 802.1X voice VLAN ··························································································································· 93
Configuration guidelines ······································································································································ 94
Configuration prerequisites ·································································································································· 94
Configuration procedure ······································································································································ 94
Configuring 802.1X MAC address binding ··············································································································· 94
Displaying and maintaining 802.1X ··························································································································· 95
802.1X authentication configuration example ··········································································································· 96
Network requirements ··········································································································································· 96
ii