HP MSR Series Configuration Manual page 4

EAP relay ························································································································ 84
EAP termination ················································································································ 86
Configuring 802.1X ········································································· 88
Access control methods ············································································································ 88
802.1X VLAN manipulation ········································································································ 88
Authorization VLAN ··········································································································· 88
Guest VLAN ····················································································································· 90
Auth-Fail VLAN ················································································································· 91
Critical VLAN ···················································································································· 91
Using 802.1X authentication with other features ············································································· 92
ACL assignment ················································································································ 92
EAD assistant ··················································································································· 93
SmartOn ·························································································································· 93
Compatibility information ··········································································································· 94
Feature and hardware compatibility ······················································································· 94
Command and hardware compatibility ··················································································· 94
Configuration prerequisites ········································································································ 95
802.1X configuration task list ······································································································ 95
Enabling 802.1X ······················································································································ 95
Enabling EAP relay or EAP termination ························································································ 96
Setting the port authorization state ······························································································· 96
Specifying an access control method ··························································································· 97
Setting the maximum number of concurrent 802.1X users on a port ···················································· 98
Setting the maximum number of authentication request attempts ······················································· 98
Setting the 802.1X authentication timeout timers ············································································ 98
Configuring the online user handshake feature ··············································································· 99
Configuration guidelines ····································································································· 99
Configuration procedure ····································································································· 99
Configuring the authentication trigger feature ··············································································· 100
Configuration guidelines ··································································································· 100
Configuration procedure ··································································································· 100
Specifying a mandatory authentication domain on a port ································································ 100
Setting the quiet timer ············································································································· 101
Enabling the periodic online user reauthentication feature······························································· 101
Configuring an 802.1X guest VLAN ···························································································· 102
Configuration guidelines ··································································································· 102
Configuration procedure ··································································································· 102
Configuring an 802.1X Auth-Fail VLAN ······················································································· 102
Configuration guidelines ··································································································· 102
Configuration procedure ··································································································· 103
Configuring an 802.1X critical VLAN ·························································································· 103
Configuration guidelines ··································································································· 103
Configuration procedure ··································································································· 103
Specifying supported domain name delimiters ·············································································· 103
Configuring the EAD assistant feature ························································································ 104
Configuring 802.1X SmartOn ···································································································· 105
Displaying and maintaining 802.1X ···························································································· 106
802.1X authentication configuration examples ·············································································· 106
Basic 802.1X authentication configuration example ································································ 106
802.1X guest VLAN and authorization VLAN configuration example ··········································· 108
802.1X with ACL assignment configuration example ······························································· 111
802.1X with EAD assistant configuration example (with DHCP relay agent) ································· 112
802.1X with EAD assistant configuration example (with DHCP server) ········································ 115
802.1X SmartOn configuration example ··············································································· 117
Troubleshooting 802.1X ·········································································································· 119
Web browser users cannot be redirected correctly ·································································· 119
Configuring MAC authentication ······················································ 120
Overview ······························································································································ 120
User account policies ······································································································· 120
Authentication methods ···································································································· 120
ii