Operating Notes; Example: Configuring 802.1X Controlled Directions - HP ProCurve Switch 2900yl-24G Access Security Manual

ProCurve(config)# aaa port-access authenticator a10
ProCurve(config)# aaa authentication port-access eap-radius
ProCurve(config)# aaa port-access authenticator active
ProCurve(config)# aaa port-access a10 controlled-directions in
Figure 9-5. Example of Configuring 802.1X Controlled Directions

Operating Notes

Using the aaa port-access controlled-directions in command, you can enable
■
the transmission of Wake-on-LAN traffic on unauthenticated egress ports
that are configured for any of the following port-based security features:
• 802.1X authentication
• MAC authentication
• Web authentication
Because a port can be configured for more than one type of authentication
to protect the switch from unauthorized access, the last setting you
configure with the aaa port-access controlled-directions command is
applied to all authentication methods configured on the switch.
For information about how to configure and use MAC and Web
authentication, refer to chapter 3, "Web and MAC Authentication".
■ To display the currently configured 802.1X Controlled Directions value,
enter the show port-access authenticator config command.
When an 802.1X-authenticated port is configured with the controlled-
■
directions in setting, eavesdrop prevention is not supported on the
port.

Example: Configuring 802.1X Controlled Directions

The following example shows how to enable the transmission of Wake-on-
LAN traffic in the egress direction on an 802.1X-aware port before it transitions
to the 802.1X authenticated state and successfully authenticates a client
device.
Configuring Port-Based and Client-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
9-27