Table of Contents
Advertisement
To display the current configuration of 802.1X, Web-based, and MAC
authentication on all switch ports, enter the show port-access config
command.
HP Switch (config)# show port-access config
Port Access Status Summary
Port-access authenticator activated [No] : Yes
Allow RADIUS-assigned dynamic (GVRP) VLANs [No] : Yes
Supplicant Authenticator Web Auth Mac Auth
Port Enabled
---- ---------- ------------- -------- --------
1
Yes
2
No
3
No
4
No
5
No
6
No
7
No
8
No
9
No
10
No
11
No
12
No
...
Figure 4-4. Example of show port-access config Command Output
3.
Determine whether any VLAN assignments are needed for authenticated
clients.
a.
If you configure the RADIUS server to assign a VLAN for an authen-
ticated client, this assignment overrides any VLAN assignments con-
figured on the switch while the authenticated client session remains
active. Note that the VLAN must be statically configured on the
switch.
b. If there is no RADIUS-assigned VLAN, the port can join an "Authorized
VLAN" for the duration of the client session, if you choose to configure
one. This must be a port-based, statically configured VLAN on the
switch.
c.
If there is neither a RADIUS-assigned VLAN or an "Authorized VLAN"
for an authenticated client session on a port, then the port's VLAN
membership remains unchanged during authenticated client ses-
sions. In this case, configure the port for the VLAN in which you want
it to operate during client sessions.
Setup Procedure for Web/MAC Authentication
Enabled
Enabled
No
No
Yes
No
Yes
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
Web and MAC Authentication
Enabled
Yes
Yes
No
No
No
No
No
No
No
No
No
No
4-13
Hide quick links:
Advertisement
Table of Contents
