HP ProCurve Switch 2900yl-24G Access Security Manual page 86

Web and MAC Authentication
Configuring MAC Authentication
3-32
Syntax: aaa port-access <port-list > controlled-directions <both | in> —cont'd—
For information on how to configure the prerequisites
for using the aaa port-access controlled-directions in
command, see Chapter 4, "Multiple Instance Span-
ning-Tree Operation" in the Advanced Traffic Manage-
ment Guide.
To display the currently configured Controlled Direc-
tions value for MAC-authenticated ports, enter the
show port-access mac-based config command as shown
in Figure 3-6.
Notes:
The aaa port-access controlled-direction in command allows Wake-
■
on-LAN traffic to be transmitted on a MAC-authenticated egress
port that has not yet transitioned to the authenticated state; the
controlled-direction both setting prevents Wake-on-LAN traffic to be
transmitted on a MAC-authenticated egress port until authentica-
tion occurs.
The Wake-on-LAN feature is used by network administrators to
remotely power on a sleeping workstation (for example, during early
morning hours to perform routine maintenance operations, such as
patch management and software updates)
Using the aaa port-access controlled-directions in command, you can
■
enable the transmission of Wake-on-LAN traffic on unauthenticated
egress ports that are configured for any of the following port-based
security features:
• 802.1X authentication
• MAC authentication
• Web authentication
Because a port can be configured for more than one type of authenti-
cation to protect the switch from unauthorized access, the last setting
you configure with the aaa port-access controlled-directions command is
applied to all authentication methods configured on the switch.
For information about how to configure and use 802.1X authentica-
tion, refer to chapter 9, "Configuring Port-Based and Client-Based
Access Control (802.1X)".
When a MAC-authenticated port is configured with the controlled-
■
directions in setting, eavesdrop prevention is not supported on the
port.