Enabling 802.1X; Enabling Eap Relay Or Eap Termination - HP 10500 Series Configuration Manual

Enabling 802.1X

Follow these guidelines when you enable 802.1X:
If the PVID of a port is a voice VLAN, the 802.1X function cannot take effect on the port. For more
•
information about voice VLANs, see Layer 2
802.1X is mutually exclusive with link aggregation and service loopback group configuration on a
•
port.
• On an 802.1X and MAC authentication enabled port, the EAP packet from an unknown MAC
address immediately triggers 802.1X authentication, and any other type of packet from an
unknown MAC address immediately triggers MAC authentication.
To enable 802.1X:
Step
1. Enter system view.
2. Enable 802.1X globally.
3. Enable 802.1X on a port.

Enabling EAP relay or EAP termination

When configuring EAP relay or EAP termination, consider the following factors:
The support of the RADIUS server for EAP packets
•
The authentication methods supported by the 802.1X client and the RADIUS server
•
If the client is using only MD5-Challenge EAP authentication or the "username + password" EAP
authentication initiated by an HP iNode 802.1X client, you can use both EAP termination and EAP relay.
To use EAP-TL, PEAP, or any other EAP authentication methods, you must use EAP relay. When you make
your decision, see
For more information about EAP relay and EAP termination, see
To configure EAP relay or EAP termination:
Step
1. Enter system
view.
Command
system-view
dot1x
•
(Approach 1) In system view:
dot1x interface interface-list
•
(Approach 2) In Ethernet interface
view:
a. interface interface-type
interface-number
b. dot1x
"A comparison of EAP relay and EAP
Command
system-view
LAN Switching Configuration Guide.
—
termination" for help.
"802.1X authentication
Remarks
N/A
86
Remarks
N/A
By default, 802.1X is disabled
globally.
Use either approach.
By default, 802.1X is disabled
on a port.
procedures."