HP FlexNetwork 10500 Series Security Configuration Manual page 4

802.1X VLAN manipulation ······························································································································ 76
Authorization VLAN ·································································································································· 76
Guest VLAN ············································································································································· 78
Auth-Fail VLAN ········································································································································ 79
Critical VLAN ············································································································································ 80
Using 802.1X authentication with other features ····························································································· 82
ACL assignment ······································································································································· 82
EAD assistant ··········································································································································· 82
Redirect URL assignment ························································································································ 83
SmartOn ··················································································································································· 83
Configuration prerequisites ······························································································································ 84
802.1X configuration task list ··························································································································· 84
Enabling 802.1X ··············································································································································· 85
Enabling EAP relay or EAP termination ··········································································································· 86
Setting the port authorization state ·················································································································· 86
Specifying an access control method ·············································································································· 87
Setting the maximum number of concurrent 802.1X users on a port ······························································· 87
Setting the maximum number of authentication request attempts ··································································· 87
Setting the 802.1X authentication timeout timers ···························································································· 88
Configuring the online user handshake feature ······························································································· 88
Configuration guidelines ··························································································································· 89
Configuration procedure ··························································································································· 89
Configuring the authentication trigger feature ·································································································· 89
Configuration guidelines ··························································································································· 89
Configuration procedure ··························································································································· 90
Specifying a mandatory authentication domain on a port ················································································ 90
Configuring the quiet timer ······························································································································· 90
Enabling the periodic online user reauthentication feature ·············································································· 91
Manually reauthenticating all online 802.1X users on a port ··········································································· 92
Sending 802.1X protocol packets out of a port without VLAN tags ································································· 92
Configuring an 802.1X guest VLAN ················································································································· 93
Configuration guidelines ··························································································································· 93
Configuration prerequisites ······················································································································ 93
Configuration procedure ··························································································································· 94
Configuring an 802.1X Auth-Fail VLAN ··········································································································· 94
Configuration guidelines ··························································································································· 94
Configuration prerequisites ······················································································································ 94
Configuration procedure ··························································································································· 95
Configuring an 802.1X critical VLAN ················································································································ 95
Configuration guidelines ··························································································································· 95
Configuration prerequisites ······················································································································ 95
Configuration procedure ··························································································································· 95
Enabling the 802.1X critical voice VLAN ·········································································································· 96
Configuration prerequisites ······················································································································ 96
Configuration procedure ··························································································································· 96
Sending EAP-Success packets for 802.1X users assignment to the 802.1X critical VLAN ····························· 97
Specifying supported domain name delimiters ································································································ 97
Enabling 802.1X guest VLAN assignment delay ····························································································· 98
Configuring the EAD assistant feature ············································································································· 98
Configuring 802.1X SmartOn ··························································································································· 99
Displaying and maintaining 802.1X ················································································································ 100
802.1X authentication configuration examples ······························································································ 100
Basic 802.1X authentication configuration example ·············································································· 100
802.1X guest VLAN and authorization VLAN configuration example ···················································· 102
802.1X with ACL assignment configuration example ············································································· 105
802.1X with EAD assistant configuration example (with DHCP relay agent) ········································· 106
802.1X with EAD assistant configuration example (with DHCP server) ················································· 109
802.1X SmartOn configuration example ································································································ 111
Troubleshooting 802.1X EAD assistant for Web browser users ···································································· 113
Configuring MAC authentication ································································· 114
Overview ························································································································································ 114
ii