HP Q.11.XX Manual page 10

viii
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-7
General 802.1X Authenticator Operation . . . . . . . . . . . . . . . . . . . . . . . . . . 8-10
Example of the Authentication Process . . . . . . . . . . . . . . . . . . . . . . . . 8-10
Switch-Port Supplicant Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-11
General Operating Rules and Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-12
General Setup Procedure for 802.1X Access Control . . . . . . . . . . . . . . . . 8-14
Do These Steps Before You Configure 802.1X Operation . . . . . . . . . 8-14
Overview: Configuring 802.1X Authentication on the Switch . . . . . . 8-15
Configuring Switch Ports as 802.1X Authenticators . . . . . . . . . . . . . . . . . 8-17
1. Enable 802.1X Authentication on Selected Ports . . . . . . . . . . . . . . 8-17
2. Reconfigure Settings for Port-Access . . . . . . . . . . . . . . . . . . . . . . . . 8-20
3. Configure the 802.1X Authentication Method . . . . . . . . . . . . . . . . . 8-23
4. Enter the RADIUS Host IP Address(es) . . . . . . . . . . . . . . . . . . . . . . 8-24
5. Enable 802.1X Authentication on the Switch . . . . . . . . . . . . . . . . . 8-24
6. Optionally Resetting Authenticator Operation . . . . . . . . . . . . . . . . 8-25
802.1X Open VLAN Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-26
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-26
VLAN Membership Priorities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-27
Use Models for 802.1X Open VLAN Modes . . . . . . . . . . . . . . . . . . . . . 8-28
Operating Rules for Authorized-Client and
Unauthorized-Client VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-31
Setting Up and Configuring 802.1X Open VLAN Mode . . . . . . . . . . . . 8-34
802.1X Open VLAN Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . 8-38
Option For Authenticator Ports: Configure Port-Security To Allow
Only 802.1X Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-40
Configuring Switch Ports To Operate As
Supplicants for 802.1X Connections to Other Switches . . . . . . . . . . . . . . 8-42
Displaying 802.1X Configuration, Statistics, and Counters . . . . . . . . . . . . 8-47
Show Commands for Port-Access Authenticator . . . . . . . . . . . . . . . . 8-47
Viewing 802.1X Open VLAN Mode Status . . . . . . . . . . . . . . . . . . . . . . 8-50
Show Commands for Port-Access Supplicant . . . . . . . . . . . . . . . . . . . 8-53
How RADIUS/802.1X Authentication Affects VLAN Operation . . . . . . . . 8-54
Messages Related to 802.1X Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-58