Authentication - HP ProCurve 420 Management And Configuration Manual

Authentication

The access point supports IEEE 802.1X (802.1X) access control for wireless
clients. This control feature prevents unauthorized access to the network by
requiring an 802.1X client application to submit user credentials for authenti­
cation. Client authentication is then verified by a RADIUS server using EAP
(Extensible Authentication Protocol) before the access point grants client
access to the network. The 802.1X EAP packets are also used to pass dynamic
unicast session keys and static broadcast keys to wireless clients.
Client MAC addresses can also be used for authentication on the access point.
For local MAC authentication, first define the default filtering policy using the
mac-access permission command. Then enter the MAC addresses to be filtered,
indicating if they are active or inactive. For RADIUS MAC authentication, the
MAC addresses and filtering policy must be configured on the RADIUS server
Command Function
802.1x broadcast- Sets the interval at which the primary broadcast keys
key-refresh-rate are refreshed for stations using 802.1X dynamic keying
802.1x session- Sets the interval at which unicast session keys are
key-refresh-rate refreshed for associated stations using dynamic keying
802.1x session­ Sets the timeout after which a connected client must
timeout be re-authenticated
mac-access Sets filtering to allow or deny listed addresses
permission
mac-access entry Enters or removes MAC addresses from the filter table GC
mac­ Sets address filtering to be performed with local or

authentication

remote options
server
mac­ Sets the interval at which associated clients will be re- GC
authentication authenticated with the RADIUS server authentication
session-timeout database
show Shows all 802.1X authentication settings, as well as the Exec
authentication address filter table
Command Line Reference
Authentication
Mode Page
GC 6-50
GC 6-50
GC 6-51
GC 6-52
6-52
GC 6-53
6-54
6-54
6-49