HP ProCurve Switch 2900yl-24G Access Security Manual page 12

x
General 802.1X Authenticator Operation . . . . . . . . . . . . . . . . . . . . . . 9-10
Example of the Authentication Process . . . . . . . . . . . . . . . . . . . . . . . . 9-10
VLAN Membership Priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-11
General Operating Rules and Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-13
General Setup Procedure for 802.1X Access Control . . . . . . . . . . . 9-15
Do These Steps Before You Configure 802.1X Operation . . . . . . . . . 9-15
Overview: Configuring 802.1X Authentication on the Switch . . . . . . 9-16
Configuring Switch Ports as 802.1X Authenticators . . . . . . . . . . . . 9-17
1. Enable 802.1X Authentication on Selected Ports . . . . . . . . . . . . . . 9-18
A. Enable the Selected Ports as Authenticators and Enable
the (Default) Port-Based Authentication . . . . . . . . . . . . . . . . . . . 9-18
B. Specify Client-Based or Return to Port-Based 802.1X
Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-18
Example: Configuring Client-Based 802.1X Authentication . . . . 9-19
Example: Configuring Port-Based 802.1X Authentication . . . . . 9-20
2. Reconfigure Settings for Port-Access . . . . . . . . . . . . . . . . . . . . . . . . 9-20
3. Configure the 802.1X Authentication Method . . . . . . . . . . . . . . . . . 9-23
4. Enter the RADIUS Host IP Address(es) . . . . . . . . . . . . . . . . . . . . . . 9-24
5. Enable 802.1X Authentication on the Switch . . . . . . . . . . . . . . . . . 9-24
6. Optionally Resetting Authenticator Operation . . . . . . . . . . . . . . . . 9-25
7. Optional: Configure 802.1X Controlled Directions . . . . . . . . . . . . . 9-25
Wake-on-LAN Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-26
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-27
Example: Configuring 802.1X Controlled Directions . . . . . . . . . 9-27
802.1X Open VLAN Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-28
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-28
VLAN Membership Priorities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-29
Use Models for 802.1X Open VLAN Modes . . . . . . . . . . . . . . . . . . . . . 9-30
Operating Rules for Authorized-Client and
Unauthorized-Client VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-35
Setting Up and Configuring 802.1X Open VLAN Mode . . . . . . . . . . . . 9-38
802.1X Open VLAN Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . 9-43
Option For Authenticator Ports: Configure Port-Security
To Allow Only 802.1X-Authenticated Devices . . . . . . . . . . . . . . . . . . 9-44
Port-Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-44