HP 5120 EI Switch Series Configuration Manual page 4

802.1X configuration ···················································································································································· 71
HP implementation of 802.1X ······································································································································ 71
Access control methods ········································································································································ 71
Using 802.1X authentication with other features ······························································································ 71
Configuring 802.1X ······················································································································································ 74
Configuration prerequisites ·································································································································· 74
802.1X configuration task list ······························································································································ 74
Enabling 802.1X ··················································································································································· 75
Specifying EAP relay or EAP termination ··········································································································· 75
Setting the port authorization state ······················································································································ 76
Specifying an access control method ·················································································································· 77
Setting the maximum number of concurrent 802.1X users on a port ······························································ 77
Setting the maximum number of authentication request attempts ···································································· 78
Setting the 802.1X authentication timeout timers ······························································································ 78
Configuring the online user handshake function ······························································································· 78
Configuring the authentication trigger function ································································································· 79
Specifying a mandatory authentication domain on a port ··············································································· 80
Enabling the quiet timer ········································································································································ 81
Enabling the periodic online user re-authentication function ············································································ 81
Configuring an 802.1X guest VLAN ··················································································································· 82
Configuring an Auth-Fail VLAN ··························································································································· 83
Displaying and maintaining 802.1X ··························································································································· 84
802.1X configuration examples ··································································································································· 84
802.1X authentication configuration example ·································································································· 84
802.1X with guest VLAN and VLAN assignment configuration example······················································· 86
802.1X with ACL assignment configuration example ······················································································· 89
EAD fast deployment configuration ····························································································································· 91
EAD fast deployment overview ····································································································································· 91
EAD fast deployment implementation ················································································································· 91
Configuring EAD fast deployment ································································································································ 91
Configuration prerequisites ·································································································································· 91
Configuration procedure ······································································································································ 91
Displaying and maintaining EAD fast deployment ····································································································· 92
EAD fast deployment configuration example ·············································································································· 93
Troubleshooting EAD fast deployment ························································································································· 95
Web browser users cannot be correctly redirected ·························································································· 95
MAC authentication configuration ······························································································································· 96
MAC authentication overview ······································································································································ 96
User account policies ············································································································································ 96
Authentication approaches ·································································································································· 96
MAC authentication timers ··································································································································· 97
Using MAC authentication with other features ··········································································································· 97
VLAN assignment ·················································································································································· 97
ACL assignment ····················································································································································· 97
Guest VLAN ··························································································································································· 97
MAC authentication configuration task list ················································································································· 98
Basic configuration for MAC authentication ··············································································································· 98
Configuration prerequisites ·································································································································· 98
Configuration procedure ······································································································································ 98
Specifying an authentication domain for MAC authentication users ······································································· 99
Configuring a MAC authentication guest VLAN ······································································································ 100
Configuration prerequisites ································································································································ 100
Configuration procedure ···································································································································· 100
Displaying and maintaining MAC authentication ···································································································· 101
iv