HP A6600 Configuration Manual page 4

Authentication procedure ·············································································································································· 76
EAP relay ································································································································································ 76
EAP termination ····················································································································································· 78
Configuring 802.1X ·················································································································································· 79
HP implementation of 802.1X ······································································································································ 79
Access control methods ········································································································································ 79
Using 802.1X authentication with other features ······························································································ 79
Configuring 802.1X ······················································································································································ 82
Configuration prerequisites ·································································································································· 82
802.1X configuration task list ······························································································································ 82
Enabling 802.1X ··················································································································································· 83
Specifying an EAP message handling method ·································································································· 83
Setting the port authorization state ······················································································································ 84
Specifying an access control method ·················································································································· 84
Setting the maximum number of concurrent 802.1X users on a port ······························································ 85
Setting the maximum number of authentication request attempts ···································································· 85
Setting the 802.1X timers ····································································································································· 85
Configuring the online user handshake function ······························································································· 87
Enabling the proxy detection function ················································································································· 87
Enabling the multicast trigger function ················································································································ 88
Enabling the unicast trigger function ··················································································································· 88
Specifying a mandatory authentication domain on a port ··············································································· 89
Enabling the quiet timer ········································································································································ 89
Enabling the periodic online user re-authentication function ············································································ 90
Configuring an 802.1X guest VLAN ··················································································································· 90
Configuring an Auth-Fail VLAN ··························································································································· 91
Displaying and maintaining 802.1X ··························································································································· 92
802.1X configuration examples ··································································································································· 92
802.1X authentication configuration example ·································································································· 92
802.1X with guest VLAN and VLAN assignment configuration example······················································· 94
802.1X with ACL assignment configuration example ······················································································· 97
Configuring EAD fast deployment ···························································································································· 99
EAD fast deployment implementation ················································································································· 99
Configuring EAD fast deployment ································································································································ 99
Configuration prerequisites ·································································································································· 99
Configuration procedure ······································································································································ 99
Displaying and maintaining EAD fast deployment ··································································································· 100
EAD fast deployment configuration example ············································································································ 100
Troubleshooting EAD fast deployment ······················································································································· 103
Users cannot be correctly redirected ················································································································· 103
Configuring MAC authentication ··························································································································· 104
User account policies ·········································································································································· 104
Authentication approaches ································································································································ 104
MAC authentication timers ································································································································· 105
Using MAC authentication with other features ········································································································· 105
VLAN assignment ················································································································································ 105
ACL assignment ··················································································································································· 105
Configuration task list ·················································································································································· 106
Basic configuration for MAC authentication ············································································································· 106
Configuration prerequisites ································································································································ 106
Configuration procedure ···································································································································· 106
Specifying MAC authentication user domain ··········································································································· 107
Displaying and maintaining MAC authentication ···································································································· 108
iv