Access Security Guide K/KA/KB.15.15

Table 47 Access Security and Switch Authentication Features (continued)
More information and configuration
details
Security guidelinesDefault settingFeature
This feature provides port-based
or user-based authentication
none802.1X Access Control
through a RADIUS server to protect
the switch from unauthorized
access and to enable the use of
RADIUS-based user profiles to
control client access to network
services. Included in the general
features are the following:
• user-based access control
supporting up to 32
authenticated clients per port
• port-based access control
allowing authentication by a
single client to open the port
• switch operation as a
supplicant for point-to-point
connections to other
802.1X-compliant HP switches
“Web-based and MAC
authentication” (page 72)
These options are designed for
application on the edge of a
noneWeb and MAC
Authentication
network to provide port-based
security measures for protecting
private networks and the switch
itself from unauthorized access.
Because neither method requires
clients to run any special
supplicant software, both are
suitable for legacy systems and
temporary access situations where
introducing supplicant software is
not an attractive option.
Both methods rely on using a
RADIUS server for authentication.
This simplifies access security
management by allowing you to
control access from a master
database in a single server. It also
means the same credentials can
be used for authentication,
regardless of which switch or
switch port is the current access
point into the LAN. Web
authentication uses a web page
login to authenticate users for
access to the network. MAC
authentication grants access to a
secure network by authenticating
device MAC addresses for access
to the network.
NOTE: Beginning with software release K.14.xx, the Management Interface wizard provides a
convenient step-by-step method to prepare the switch for secure network operation. See “Using
the Management Interface wizard” (page 436) for details.
444 Traffic/Security Features and Monitors