HP ProCurve 5400zl Reference Manual page 45

Command Line Interface Reference Guide
Usage: [no] aaa port-access <authenticator ... | supplicant ...
Description: Configure 802.1X (Port Based Network Access),
Next Available Options:
gvrp-vlans
■
authenticator
■
supplicant
■
mac-based
■
device's
web-based
■
device's
PORT-LIST
■
(p. 43)
PORT-LIST
■ [no] aaa port-access authenticator [ETHERNET] PORT-LIST
Manage 802.1X on the device port(s).
Next Available Options:
control < authorized | auto | unauthorized > -- Set the authenticator to Force Authorized, Force
■
Unauthorized or Auto state (default Auto). (NUMBER)
quiet-period
■
supplicant (default 60 sec.). (NUMBER)
tx-period
■
PDU (default 30 sec.). (NUMBER)
supplicant-timeout
■
(default 30 sec.). (NUMBER)
server-timeout
■
(NUMBER)
max-requests
■
requests (default 2). (NUMBER)
reauth-period
■
to '0' to disable re-authentication. (NUMBER)
auth-vid
■
by default).(p. 30)
unauth-vid
■
connected (not configured by
unauth-period
■
moving the port to the VLAN for unauthenticated clients. (NUMBER)
© 2009 Hewlett-Packard Development Company, L.P.
web-based ... | mac-based ...>
MAC address based network access,
or web authentication based network access
on the device. You can configure authenticator,
supplicant, MAC address based, or web authentication based
network access on the device or device ports by specifying
a corresponding keyword.
See 'aaa port-access authenticator help', 'aaa port-access
supplicant help', 'aaa port-access mac-based help', and
'aaa port-access web-based help' for further details on
authenticator, supplicant, MAC address based, and
web authentication based network access configuration.
-- Enable/disable the use of RADIUS-assigned dynamic (GVRP)
-- Configure 802(p. 28)
-- Manage 802 ([ethernet] PORT-LIST)
-- Configure MAC address based network authentication on the device or the
port(s)(p. 37)
-- Configure web authentication based network authentication on the device or the
port(s)(p. 55)
-- Manage general port security features on the device port(s). ([ethernet] PORT-LIST)
< 0 to 65535 > -- Set the period of time the switch does not try to acquire a
< 1 to 65535 > -- Set the period of time the switch waits until retransmission of EAPOL
< 1 to 300 > -- Set the supplicant response timeout on an EAP request
(p. 52)
< 1 to 300 > -- Set the authentication server response timeout (default 30sec.).
(p. 50)
< 1 to 10 > -- Set maximum number of times the switch retransmits authentication
< 0 to 9999999 > -- Set the re-authentication timeout (in seconds, default 0); set
-- Configures VLAN where to move port after successful authentication (not configured
-- Configures VLAN where to keep port while there is an unauthenticated client
default).(p. 53)
< 0 to 255 > -- Set period of time the switch waits for authentication before
(p. 51)
(p. 47)
(p. 53)
(p. 39)
(p. 47)
VLANs(p. 34)
(p. 32)
(p. 53)
aaa
43