How Radius-Based Authentication Affects Vlan Operation - HP ProCurve J8766A Release Note

ProCurve(config)# show run
Running configuration:
; J8165A Configuration Editor; Created on release #H.10.32
hostname "ProCurve"
snmp-server mib hpSwitchAuthMIB excluded
ip default-gateway 10.10.24.55
snmp-server community "public" Operator
vlan 1
name "DEFAULT_VLAN"
untagged 1-50
ip address 10.10.24.100 255.255.255.0
exit
ProCurve(config)#
Figure 2. Using the show run Command to View the Current Authentication MIB Access State

How RADIUS-Based Authentication Affects VLAN Operation

Using a RADIUS server to authenticate clients, you can provide port-level security protection from
unauthorized network access for the following authentication methods:
■ 802.1X: Port-based or client-based access control to open a port for client access after
authenticating valid user credentials.
■ MAC address: Authenticates a device's MAC address to grant access to the network.
Web-browser interface: Authenticates clients for network access using a web page for user
■
login.
Note
You can use 802.1X (port-based or client-based) authentication and either Web or MAC authentication
at the same time on a port, with a maximum of 32 clients allowed on the port. (The default is one
client.) Web authentication and MAC authentication are mutually exclusive on the same port. Also,
you must disable LACP on ports configured for any of these authentication methods. For more
information, refer to the "Configuring Port-Based Access Control (802.1X)" and "Web and MAC
Authentication" chapters of the Access Security Guide.
Enhancements
Release L.11.08 Enhancements
Indicates that SNMP access to the
authentication configuration MIB
(hpSwitchAuth) is disabled.
79