HP 5120 EI Switch Series Configuration Manual page 97

Figure 34 Network diagram for 802.1X with guest VLAN and VLAN assignment configuration
Update server
VLAN 10
GE1/0/1
VLAN 1
GE1/0/2
Host
Update server
VLAN 10
GE1/0/1
VLAN 10
GE1/0/2
Host
Configuration procedure
NOTE:
The following configuration procedure covers most AAA/RADIUS configuration commands on the
device. The configuration on the 802.1X client and RADIUS server are not shown. For more
information about AAA/RADIUS configuration commands, see the
Configure the 802.1X client. Make sure the client is able to update its IP address after the access
1.
port is assigned to the guest VLAN or a server-assigned VLAN. (Details not shown)
Configure the RADIUS server to provide authentication, authorization, and accounting services.
2.
Configure user accounts and server-assigned VLAN, VLAN 5 in this example. (Details not shown)
Create VLANs, and assign ports to the VLANs.
3.
<Device> system-view
[Device] vlan 1
[Device-vlan1] port gigabitethernet 1/0/2
[Device-vlan1] quit
[Device] vlan 10
[Device-vlan10] port gigabitethernet 1/0/1
[Device-vlan10] quit
[Device] vlan 2
[Device-vlan2] port gigabitethernet 1/0/4
[Device-vlan2] quit
[Device] vlan 5
[Device-vlan5] port gigabitethernet 1/0/3
Authentication server
VLAN 2
GE1/0/4
VLAN 5
GE1/0/3
Device
Internet
Port added to the
guest VLAN
Authentication server
VLAN 2
GE1/0/4
VLAN 5
GE1/0/3
Device
Internet
Update server
User gets
online
VLAN 5
GE1/0/2
Host
87
Authentication server
VLAN 10 VLAN 2
GE1/0/1 GE1/0/4
VLAN 5
GE1/0/3
Device
Internet
Security Command Reference
.