Setting The Port Authorization State - HP 10500 Series Configuration Manual

Step
2. Configure EAP
relay or EAP
termination.
NOTE:
If EAP relay mode is used, the user-name-format command configured in RADIUS scheme view does not
take effect. The access device sends the authentication data from the client to the server without any
modification.

Setting the port authorization state

The port authorization state determines whether the client is granted access to the network. You can
control the authorization state of a port by using the dot1x port-control command and the following
keywords:
authorized-force—Places the port in the authorized state, enabling users on the port to access the
•
network without authentication.
• unauthorized-force—Places the port in the unauthorized state, denying any access requests from
users on the port.
auto—Places the port initially in the unauthorized state to allow only EAPOL packets to pass. After
•
a user passes authentication, sets the port in the authorized state to allow access to the network. You
can use this option in most scenarios.
You can set the authorization state for one port in interface view or for multiple ports in system view. If
different authorization states are set for a port in system view and interface view, the one set later takes
effect.
To set the authorization state of a port:
Step
1. Enter system
view.
2. Set the port
authorization
state.
Command
dot1x authentication-method
{ chap | eap | pap }
Command
system-view
•
(Approach 1) In system view:
dot1x port-control { authorized-force | auto |
unauthorized-force } [ interface interface-list ]
•
(Approach 2) In Ethernet interface view:
a. interface interface-type interface-number
b. dot1x port-control { authorized-force | auto |
unauthorized-force }
87
Remarks
By default, the network access device performs EAP
termination and uses CHAP to communicate with the
RADIUS server.
Specify the eap keyword to enable EAP termination.
Specify the chap or pap keyword to enable
CHAP-enabled or PAP-enabled EAP relay.
Remarks
N/A
Use either approach.
By default, auto applies.