HPE FlexNetwork 5510 HI Series Security Configuration Manual page 4

Authorization VLAN ··········································································································· 72
Guest VLAN ····················································································································· 74
Auth-Fail VLAN ················································································································· 75
Critical VLAN ···················································································································· 76
Critical voice VLAN ············································································································ 78
Using 802.1X authentication with other features ············································································· 79
ACL assignment ················································································································ 79
User profile assignment ······································································································ 79
EAD assistant ··················································································································· 79
Configuration prerequisites ········································································································ 80
802.1X configuration task list ······································································································ 80
Enabling 802.1X ······················································································································ 80
Enabling EAP relay or EAP termination ························································································ 81
Setting the port authorization state ······························································································· 82
Specifying an access control method ··························································································· 82
Setting the maximum number of concurrent 802.1X users on a port ···················································· 82
Setting the maximum number of authentication request attempts ······················································· 83
Setting the maximum number of 802.1X authentication attempts for MAC authenticated users ················· 83
Setting the 802.1X authentication timeout timers ············································································ 83
Configuring the online user handshake feature ··············································································· 84
Configuration guidelines ····································································································· 84
Configuration procedure ····································································································· 85
Configuring the authentication trigger feature ················································································· 85
Configuration guidelines ····································································································· 85
Configuration procedure ····································································································· 85
Specifying a mandatory authentication domain on a port ·································································· 86
Configuring the quiet timer ········································································································· 86
Enabling the periodic online user reauthentication feature································································· 87
Configuring an 802.1X guest VLAN ······························································································ 87
Configuration guidelines ····································································································· 87
Configuration prerequisites ·································································································· 88
Configuration procedure ····································································································· 88
Enabling 802.1X guest VLAN assignment delay ············································································· 88
Configuring an 802.1X Auth-Fail VLAN ························································································· 89
Configuration guidelines ····································································································· 89
Configuration prerequisites ·································································································· 90
Configuration procedure ····································································································· 90
Configuring an 802.1X critical VLAN ···························································································· 90
Configuration guidelines ····································································································· 90
Configuration prerequisites ·································································································· 90
Configuring the 802.1X critical VLAN on a port ········································································ 91
Sending EAP-Success packets to users in the 802.1X critical VLAN ············································ 91
Enabling the 802.1X critical voice VLAN ······················································································· 91
Configuration restrictions and guidelines ················································································ 91
Configuration prerequisites ·································································································· 92
Configuration procedure ····································································································· 92
Specifying supported domain name delimiters ················································································ 92
Configuring the EAD assistant feature ·························································································· 93
Displaying and maintaining 802.1X ······························································································ 93
802.1X authentication configuration examples ················································································ 94
Basic 802.1X authentication configuration example ·································································· 94
802.1X guest VLAN and authorization VLAN configuration example ············································· 96
802.1X with ACL assignment configuration example ································································· 98
802.1X with EAD assistant configuration example ·································································· 100
Troubleshooting 802.1X ·········································································································· 102
EAD assistant for Web browser users ·················································································· 102
Configuring MAC authentication ······················································ 103
Overview ······························································································································ 103
User account policies ······································································································· 103
Authentication methods ···································································································· 103
VLAN assignment ············································································································ 104
ii