Displaying And Maintaining 802.1X; 802.1X Configuration Examples; 802.1X Authentication Configuration Example - HP 5120 EI Switch Series Configuration Manual

Displaying and maintaining 802.1X

To do...
Display 802.1X session
information, statistics, or
configuration information of
specified or all ports
Clear 802.1X statistics

802.1X configuration examples

802.1X authentication configuration example

Network requirements
As shown in
GigabitEthernet 1/0/1. Implement MAC-based access control on the port, so the logoff of one user does
not affect other online 802.1X users.
Use RADIUS servers to perform authentication, authorization, and accounting for the 802.1X users. If
RADIUS authentication fails, perform local authentication on the access device. If RADIUS accounting
fails, the access device logs the user off.
Configure the host at 10.1.1.1 as the primary authentication and accounting servers, and the host at
10.1.1.2 as the secondary authentication and accounting servers. Assign all users to the ISP domain
aabbcc.net, which accommodates up to 30 users.
Configure the shared key as name for packets between the access device and the authentication server,
and the shared key as money for packets between the access device and the accounting server.
Figure 33 Network diagram for 802.1X authentication configuration
Supplicant
Host
192.168.1.2/24
Configuration procedure
NOTE:
For information about the RADIUS commands used on the access device in this example, see the
Security Command Reference
Use the command...
display dot1x [ sessions | statistics ] [
interface interface-list ] [ | { begin |
exclude | include } regular-expression ]
reset dot1x statistics [ interface interface-
list ]
Figure 33, the access device performs 802.1X authentication for users that connect to port
GE1/0/2
Authenticator
10.1.1.10/24
GE1/0/1
Vlan-int2
192.168.1.1/24
Device
.
RADIUS server cluster
Primary : 10.1.1.1/24
Secondary: 10.1.1.2/24
Internet
84
Remarks
Available in any view
Available in user view