Verifying The Configuration - HP 10500 Series Configuration Manual

Security configuration guide
Hide thumbs Also See for 10500 Series:
Table of Contents

Advertisement

# Enable DHCP.
<Device> system-view
[Device] dhcp enable
# Configure a DHCP server for a DHCP server group.
[Device] dhcp relay server-group 1 ip 192.168.2.1
# Enable the relay agent on VLAN interface 2.
[Device] interface vlan-interface 2
[Device-Vlan-interface2] dhcp select relay
# Correlate VLAN interface 2 to the DHCP server group.
[Device-Vlan-interface2] dhcp relay server-select 1
[Device-Vlan-interface2] quit
3.
Configure a RADIUS scheme and an ISP domain.
For more information about the configuration procedure, see "802.1X authentication
configuration example."
4.
Configure 802.1X:
# Configure the free IP.
[Device] dot1x free-ip 192.168.2.0 24
# Configure the redirect URL for client software download.
[Device] dot1x url http://192.168.2.3
# Enable 802.1X globally.
[Device] dot1x
# Enable 802.1X on the port.
[Device] interface gigabitethernet1/0/1
[Device-GigabitEthernet1/0/1] dot1x

Verifying the configuration

Use the display dot1x command to display the 802.1X configuration. After the host obtains an IP address
from a DHCP server, use the ping command from the host to ping an IP address on the network segment
specified by free IP.
C:\>ping 192.168.2.3
Pinging 192.168.2.3 with 32 bytes of data:
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Ping statistics for 192.168.2.3:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
The output shows that you can access that segment before passing 802.1X authentication. If you use a
Web browser to access any external website beyond the free IP segments, you are redirected to the Web
109

Advertisement

Table of Contents
loading

Table of Contents