HP 5120 SI Series Security Configuration Manual page 6

Inconsistent keys on the access device and the portal server ········································································· 159
Incorrect server port number on the access device ·························································································· 160
Triple authentication configuration ························································································································ 161
Introduction to triple authentication ···························································································································· 161
Overview ······························································································································································ 161
Triple authentication mechanism ······················································································································· 161
Extended functions ·············································································································································· 162
Triple authentication configuration task list ··············································································································· 163
Triple authentication configuration examples ··········································································································· 163
Triple authentication basic function configuration example ··········································································· 163
Triple authentication supporting VLAN assignment and Auth-Fail VLAN configuration example ·············· 166
Port security configuration ······································································································································ 171
Port security overview ·················································································································································· 171
Port security features ··········································································································································· 172
Port security modes ············································································································································· 172
Support for guest VLAN and Auth-Fail VLAN ··································································································· 174
Port security configuration task list ····························································································································· 175
Enabling port security ·················································································································································· 175
Configuration prerequisites ································································································································ 175
Configuration procedure ···································································································································· 175
Setting the maximum number of secure MAC addresses ························································································ 176
Setting the port security mode ···································································································································· 176
Configuration prerequisites ································································································································ 176
Configuration procedure ···································································································································· 177
Configuring port security features ······························································································································ 178
Configuring NTK ················································································································································· 178
Configuring intrusion protection ························································································································ 178
Configuring port security traps ·························································································································· 179
Configuring secure MAC addresses ·························································································································· 179
Configuration prerequisites ································································································································ 180
Configuration procedure ···································································································································· 180
Ignoring authorization information from the server ·································································································· 180
Displaying and maintaining port security ·················································································································· 181
Port security configuration examples ························································································································· 181
Configuring the autoLearn mode ······················································································································· 181
Configuring the userLoginWithOUI mode ········································································································ 183
Configuring the macAddressElseUserLoginSecure mode ················································································ 187
Troubleshooting port security ······································································································································ 190
Cannot set the port security mode ····················································································································· 190
Cannot configure secure MAC addresses ········································································································ 190
Cannot change port security mode when a user is online ·············································································· 191
User profile configuration ······································································································································· 192
User profile overview ··················································································································································· 192
User profile configuration task list ······························································································································ 192
Creating a user profile ················································································································································ 193
Configuration prerequisites ································································································································ 193
Creating a user profile ········································································································································ 193
Configuring a user profile ··········································································································································· 193
Enabling a user profile ················································································································································ 194
Displaying and maintaining user profile ··················································································································· 194
Password control configuration ······························································································································ 195
Password control overview ········································································································································· 195
iv