802.1X Port Authentication - HP procurve 420 Management And Configuration Manual

802.1x Port Authentication

The access point supports IEEE 802.1x (802.1x) access control for wireless
clients. This control feature prevents unauthorized access to the network by
requiring an 802.1x client application to submit user credentials for authenti-
cation. Client authentication is then verified by a RADIUS server using EAP
(Extensible Authentication Protocol) before the access point grants client
access to the network. The 802.1x EAP packets are also used to pass dynamic
unicast session keys and static broadcast keys to wireless clients.
Command Function
802.1x Configures 802.1x as disabled, supported, or required
802.1x broadcast- Sets the interval at which the primary broadcast keys
key-refresh-rate are refreshed for stations using 802.1x dynamic keying
802.1x session- Sets the interval at which unicast session keys are
key-refresh-rate refreshed for associated stations using dynamic keying
802.1x session- Sets the timeout after which a connected client must
timeout be re-authenticated
address filter Sets filtering to allow or deny listed addresses
default
address filter entry Enters a MAC address in the filter table
address filter Removes a MAC address from the filter table
delete
mac- Sets address filtering to be performed with local or
authentication remote options
server
mac- Sets the interval at which associated clients will be re-
authentication authenticated with the RADIUS server authentication
session-timeout database
show Shows all 802.1x authentication settings, as well as the
authentication address filter table
Command Line Reference

802.1x Port Authentication

Mode Page
GC 6-40
GC 6-41
GC 6-41
GC 6-42
GC 6-43
GC 6-43
GC 6-44
GC 6-45
GC 6-45
Exec 6-46
6-39