Configuring The Radius Server To Support Mac Authentication; Using Customized Login Web Pages For Enhanced Web Authentication - ProCurve 2900 Manual

N o t e o n M A C
A d d r e s s e s
Configuring the RADIUS Server To Support MAC
Authentication
On the RADIUS server, configure the client device authentication in the same
way that you would any other client, except:
Configure the client device's (hexadecimal) MAC address as both
■
username and password. Be careful to configure the switch to use the
same format that the RADIUS server uses. Otherwise, the server will
deny access. The switch provides eight format options:
aabbccddeeff (the default format)
aabbcc-ddeeff
aa-bb-cc-dd-ee-ff
aa:bb:cc:dd:ee:ff
AABBCCDDEEFF
AABBCC-DDEEFF
AA-BB-CC-DD-EE-FF
AA:BB:CC:DD:EE:FF
You must enter the letters in a MAC address in lowercase.
If the device is a switch or other VLAN-capable device, use the base
■
MAC address assigned to the device, and not the MAC address
assigned to the VLAN through which the device communicates with
the authenticator switch. Note that the switch applies a single MAC
address to all VLANs configured in the switch. Thus, for a given
switch, the MAC address is the same for all VLANs configured on the
switch. (Refer to the chapter titled "Static Virtual LANs (VLANs)" in
the Advanced Traffic Management Guide for your switch.)
Using Customized Login Web Pages for Enhanced
Web Authentication
You can use up to three web servers in your network to store and display
customized web pages for enhanced web-authentication (EWA) login.
To configure the switch to access a web server, specify the server's IP address
or host name (using the aaa port-access web-based ewa-server command)
when you enable web authentication.
Web and MAC Authentication
Setup Procedure for Web/MAC Authentication
3-17