HP ProCurve 420 Management And Configuration Manual page 234

When wpa-required or wpa-supported is selected, clients are authenti­
•
cated using 802.1X via a RADIUS server. Each client has to be WPA-
enabled or support 802.1X client software. A RADIUS server must also
be configured and be available in the wired network.
When the WPA mode is set to psk, the key must first be generated and
•
distributed to all wireless clients before they can successfully asso­
ciate with the access point. Use the wpa-preshared-key command to
configure the key.
• WPA enables the access point to support different unicast encryption
keys for each client. However, the global encryption key for multicast
and broadcast traffic must be the same for all clients. This command
sets the encryption type that is used for multicast and unicast traffic.
• If any clients supported by the access point are not WPA enabled, the
multicast-cipher algorithm must be set to WEP.
• When 802.1X is disabled, the access point does not support 802.1X
authentication for any station. After successful 802.11 association,
each client is allowed to access the network.
• When 802.1X is supported, the access point supports 802.1X authen­
tication only for clients initiating the 802.1X authentication process.
The access point does NOT initiate 802.1X authentication. For
stations initiating 802.1X, only those stations successfully authenti­
cated are allowed to access the network. For those stations not
initiating 802.1X, access to the network is allowed after successful
802.11 association.
• When 802.1X is required, the access point enforces 802.1X authenti­
cation for all 802.11 associated stations. If 802.1X authentication is
not initiated by the station, the access point will initiate authentica­
tion. Only those stations successfully authenticated with 802.1X are
allowed to access the network.
Example
The following example configures mixed mode client support for dynamic
WEP keys and WPA with 802.1X.
HP420(if-wireless g)#security-suite open-system wpa­
supported 802.1x-required wep
HP420(if-wireless g)#