HPE FlexNetwork 7500 Series Security Configuration Manual page 503
Hide thumbs
Also See for FlexNetwork 7500 Series:
- Security configuration manual (506 pages) ,
- Command reference manual (474 pages) ,
- Network management and monitoring command reference (430 pages)
Table of Contents
Advertisement
[Switch-GigabitEthernet1/0/2] port link-type trunk
[Switch-GigabitEthernet1/0/2] port trunk permit vlan 2
# Configure the 802.1X client username as aaaa, and set the password to 123456 in plaintext
form on GigabitEthernet 1/0/2.
[Switch-GigabitEthernet1/0/2] dot1x supplicant username aaaa
[Switch-GigabitEthernet1/0/2] dot1x supplicant password simple 123456
# Specify TTLS-GTC as the 802.1X client EAP authentication method on GigabitEthernet 1/0/2.
[Switch-GigabitEthernet1/0/2] dot1x supplicant eap-method ttls-gtc
# Specify MAC address 1-1-1 for 802.1X client authentication on GigabitEthernet 1/0/2.
[Switch-GigabitEthernet1/0/2] dot1x supplicant mac-address 1-1-1
# Enable the 802.1X client feature on GigabitEthernet 1/0/2.
[Switch-GigabitEthernet1/0/2] dot1x supplicant enable
# Configure MACsec desire and enable MKA on GigabitEthernet 1/0/2.
[Switch-GigabitEthernet1/0/2] macsec desire
[Switch-GigabitEthernet1/0/2] mka enable
[Switch-GigabitEthernet1/0/2] quit
# Create VLAN 3.
[Switch] vlan 3
[Switch-vlan3] quit
# Configure GigabitEthernet 1/0/3 as a trunk port, and assign the port to VLAN 3.
[Switch] interface gigabitethernet 1/0/3
[Switch-GigabitEthernet1/0/3] port link-type trunk
[Switch-GigabitEthernet1/0/3] port trunk permit vlan 3
# Configure the 802.1X client username as bbbb, and set the password to 654321 in plaintext
form on GigabitEthernet 1/0/3.
[Switch-GigabitEthernet1/0/3] dot1x supplicant username bbbb
[Switch-GigabitEthernet1/0/3] dot1x supplicant password simple 654321
# Specify TTLS-GTC as the 802.1X client EAP authentication method on GigabitEthernet 1/0/3.
[Switch-GigabitEthernet1/0/3] dot1x supplicant eap-method ttls-gtc
# Specify MAC address 1-1-2 for 802.1X client authentication on GigabitEthernet 1/0/3.
[Switch-GigabitEthernet1/0/3] dot1x supplicant mac-address 1-1-2
# Enable the 802.1X client feature on GigabitEthernet 1/0/3.
[Switch-GigabitEthernet1/0/3] dot1x supplicant enable
# Configure MACsec desire and enable MKA on GigabitEthernet 1/0/3.
[Switch-GigabitEthernet1/0/3] macsec desire
[Switch-GigabitEthernet1/0/3] mka enable
[Switch-GigabitEthernet1/0/3] quit
Verifying the configuration
# Display MACsec information on GigabitEthernet 1/0/2.
[Switch] display macsec interface gigabitethernet 1/0/2 verbose
Interface GigabitEthernet1/0/2
Protect frames
Replay protection
Replay window size
Confidentiality offset : 0 bytes
Validation mode
Included SCI
: Yes
: Enabled
: 0 frames
: Check
: No
489
Advertisement
Table of Contents
Troubleshooting
