HPE FlexNetwork 10500 Series Security Configuration Manual page 16

MACsec configuration examples···················································································································· 577
Client-oriented MACsec configuration example (host as client)····························································· 577
Client-oriented MACsec configuration example (device as client) ························································· 579
Device-oriented MACsec configuration example ··················································································· 583
Troubleshooting MACsec ······························································································································· 586
Cannot establish MKA sessions between MACsec devices ·································································· 586
Configuring 802.1X client ··········································································· 588
802.1X client configuration task list ················································································································ 588
Enabling the 802.1X client feature ················································································································· 588
Configuring an 802.1X client username and password ················································································· 589
Configuring an 802.1X client MAC address ··································································································· 589
Specifying an 802.1X client EAP authentication method ··············································································· 590
Configuring an 802.1X client anonymous identifier ························································································ 590
Specifying an SSL client policy ······················································································································ 591
Displaying and maintaining 802.1X client ······································································································ 591
Configuring Web authentication ································································· 592
Overview ························································································································································ 592
Web authentication types ······················································································································· 592
Advantages of Web authentication ········································································································ 592
Web authentication system ···················································································································· 592
Web authentication process ··················································································································· 593
Web authentication support for VLAN assignment ················································································ 593
Web authentication support for authorization ACLs ··············································································· 594
Web authentication task list ··························································································································· 594
Configuration prerequisites ···························································································································· 595
Configuring the Web authentication server ···································································································· 595
Enabling Web authentication ························································································································· 596
Specifying a Web authentication domain ······································································································· 596
Setting the redirection wait time ····················································································································· 596
Configuring a Web authentication-free subnet ······························································································· 597
Setting the maximum number of Web authentication users ·········································································· 597
Configuring online Web authentication user detection ··················································································· 597
Configuring an Auth-Fail VLAN ······················································································································ 598
Configuring Web authentication to support Web proxy ·················································································· 598
Displaying and maintaining Web authentication ···························································································· 599
Web authentication configuration examples ·································································································· 599
Web authentication using the local authentication server ······································································ 599
Web authentication using the RADIUS authentication server ································································ 601
Troubleshooting Web authentication ············································································································· 603
Failure to come line (Web authentication configuration correct) ···························································· 603
Failure to come online (local authentication interface using the default ISP domain) ···························· 604
Failure to come line (VLAN configured on interface) ············································································· 604
Configuring triple authentication ································································ 605
Overview ························································································································································ 605
Triple authentication mechanism ··········································································································· 605
Extended triple authentication features ·································································································· 606
Configuration restrictions and guidelines ······································································································· 607
Configuring triple authentication ···················································································································· 607
Triple authentication configuration examples ································································································· 607
Triple authentication basic function configuration example···································································· 607
Triple authentication supporting authorization VLAN and authentication failure VLAN configuration
example ·················································································································································· 611
Document conventions and icons ······························································ 617
Conventions ··················································································································································· 617
Network topology icons ·································································································································· 618
Support and other resources ····································································· 619
Accessing Hewlett Packard Enterprise Support····························································································· 619
xiv