Displaying And Maintaining 802.1X; 802.1X Authentication Configuration Examples; Basic 802.1X Authentication Configuration Example - HP MSR Series Configuration Manual

Displaying and maintaining 802.1X

Execute display commands in any view and reset commands in user view.
Task
Display 802.1X session information,
statistics, or configuration information of
specified or all ports.
Display online 802.1X user information
(centralized devices in standalone
mode).
Display online 802.1X user information
(distributed devices in standalone
mode/centralized devices in IRF mode).
Display online 802.1X user information
(distributed devices in IRF mode).
Clear 802.1X statistics.
Remove users from the 802.1X guest
VLAN on a port.

802.1X authentication configuration examples

Basic 802.1X authentication configuration example

Network requirements
As shown in
port GigabitEthernet 2/0/1. Implement MAC-based access control on the port, so the logoff of one
user does not affect other online 802.1X users.
Use RADIUS servers to perform authentication, authorization, and accounting for the 802.1X users.
If RADIUS authentication fails, perform local authentication on the access device.
Configure the host at 10.1.1.1/24 as the primary authentication and accounting servers, and the host
at 10.1.1.2/24 as the secondary authentication and accounting servers. Assign all users to the ISP
domain bbb.
Set the shared key to name for packets between the access device and the authentication server.
Set the shared key to money for packets between the access device and the accounting server.
Figure 39, the access device performs 802.1X authentication for users who connect to
Command
display dot1x [ sessions | statistics ] [ interface interface-type
interface-number ]
display dot1x connection [ interface interface-type
interface-number | user-mac mac-addr | user-name
name-string ]
display dot1x connection [ interface interface-type
interface-number | slot slot-number | user-mac mac-addr |
user-name name-string ]
display dot1x connection [ chassis chassis-number slot
slot-number | interface interface-type interface-number |
user-mac mac-addr | user-name name-string ]
reset dot1x statistics [ interface interface-type
interface-number ]
reset dot1x guest-vlan interface interface-type
interface-number [ mac-address mac-address ]
106