Port Authentication; Enabling Supplicant Functionality - HP ProCurve Secure 7000dl Series Basic Management And Configuration Manual

Controlling Management Access to the ProCurve Secure Router

Port Authentication

2-40
Port Authentication
Allowing mobile devices unlimited access to a network poses a severe security
risk. While it is beneficial to allow employees to plug in and gain access to a
company's LAN, there is the potential that unauthorized users may similarly
gain access to your network.
Devices can be required to authenticate themselves before they are assigned
an IP address on a network and before the access port is opened. The IEEE
802.1X protocol provides a standard for this authentication.

Enabling Supplicant Functionality

The ProCurve Secure Router can act as an IEEE 802.1X supplicant. You can
set the supplicant username and password for access to the protected network
using the port-auth command.
To enable the router to function as a supplicant:
1. Move to the configuration mode context for the Ethernet interface that
you want to use to access the 802.1X-secured network.
ProCurve(config)# interface eth 0/1
ProCurve(config-eth 0/1)#
2. Configure the supplicant username and password:
Syntax: port-auth supplicant username <username> password <password>
ProCurve(config-eth 0/1)# port-auth supplicant username ProCurve password
ProCurve
The default username is "username," and the default password is
"password."
3. Enable the interface's supplicant functionality by entering the following:
ProCurve(config-eth 0/1)# port-auth supplicant
As soon as you enable the supplicant functionality, the interface begins to
attempt to authenticate itself and establish a connection to the 802.1X-secured
network.