HP 1910 User Manual page 11

Configuration procedure ···································································································································· 386
Verifying the configuration ································································································································· 389
Configuring portal authentication ·························································································································· 390
Overview ······································································································································································· 390
Extended portal functions ··································································································································· 390
Portal system components ··································································································································· 390
Portal system using the local portal server ········································································································ 392
Portal authentication modes ······························································································································· 393
Portal support for EAP ········································································································································· 393
Layer 2 portal authentication process ··············································································································· 394
Layer 3 portal authentication process ··············································································································· 395
Configuring portal authentication ······························································································································ 397
Configuration prerequisites ································································································································ 397
Recommended configuration procedure for Layer 2 portal authentication ··················································· 398
Recommended configuration procedure for Layer 3 portal authentication ··················································· 398
Configuring the Layer 2 portal service ·············································································································· 399
Configuring the Layer 3 portal service ·············································································································· 401
Configuring advanced parameters for portal authentication ········································································· 404
Configuring a portal-free rule····························································································································· 406
Portal authentication configuration examples ··········································································································· 407
Configuring Layer 2 portal authentication ········································································································ 407
Configuring direct portal authentication ··········································································································· 415
Configuring cross-subnet portal authentication ································································································ 421
Configuring RADIUS ··············································································································································· 428
Overview ······································································································································································· 428
Client/Server model ············································································································································ 428
Security and authentication mechanisms ·········································································································· 429
Basic RADIUS message exchange process ······································································································ 429
RADIUS packet format ········································································································································ 430
Extended RADIUS attributes ······························································································································· 432
Protocols and standards ····································································································································· 433
Recommended RADIUS configuration procedure ····································································································· 433
Configuring RADIUS servers ······································································································································· 434
Configuring RADIUS communication parameters ····································································································· 435
RADIUS configuration example ·································································································································· 438
Network requirements ········································································································································· 438
Configuration procedure ···································································································································· 438
Configuration guidelines ············································································································································· 443
Configuring users and user groups ························································································································ 445
Overview ······································································································································································· 445
Configuring a local user ·············································································································································· 445
Configuring a user group ············································································································································ 447
Configuring PKI ······················································································································································· 449
Overview ······································································································································································· 449
PKI terminology ···················································································································································· 449
PKI architecture ···················································································································································· 449
PKI applications ··················································································································································· 450
PKI operation ······················································································································································· 451
Configuring PKI ···························································································································································· 451
Recommended configuration procedure for manually requesting a certificate ············································ 451
Recommended configuration procedure for configuring automatic certificate request ······························· 453
Creating a PKI entity ··········································································································································· 453
ix