HP ProCurve 9304M Security Manual page 104

Security Guide for ProCurve 9300/9400 Series Routing Switches
ProCurveRS(config-if-e100-3/2)# port security
ProCurveRS(config-port-security-e100-3/2)# maximum 2
ProCurveRS(config-port-security-e100-3/2)# exit
See the "Using the MAC Port Security Feature" on page 5-1 for more information.
NOTE: There is small chance that an interface can be inadvertently disabled when both 802.1X (with dynamic
VLAN assignment) and the MAC port security feature are enabled on the interface. When this happens, disable
then re-enable the interface to bring the interface back up.
Displaying 802.1X Information
You can display the following 802.1X-related information:
• Information about the 802.1X configuration on the device and on individual ports
• Statistics about the EAPOL frames passing through the device
• Information about 802.1X-enabled ports dynamically assigned to a VLAN
• Information about the user-defined and dynamically applied MAC filters and IP ACLs currently active on the
device
• Information about the 802.1X multiple-host configuration
Displaying 802.1X Configuration Information
To display information about the 802.1X configuration on the HP device, enter the following command:
ProCurveRS# show dot1x
PAE Capability:
system-auth-control: Enable
re-authentication: Disable
global-filter-strict-security: Enable
quiet-period:
tx-period: 30 Seconds
supptimeout:
servertimeout:
maxreq: 2
re-authperiod:
security-hold-time: 60 Seconds
Protocol Version:
Syntax: show dot1x
The following table describes the information displayed by the show dot1x command.
This Field...
PAE Capability
system-auth-control
4 - 18
Authenticator Only
60 Seconds
30 Seconds
30 Seconds
3600 Seconds
1
Table 4.1: Output from the show dot1x command
Displays...
The Port Access Entity (PAE) role for the HP device. This is always
"Authenticator Only".
Whether system authentication control is enabled on the device. The
dot1x-enable command enables system authentication control on the
device.
June 2005