MSM7xx Controllers Configuration Guide v6.4.0

Supplicant timeout
Specify the maximum length of time for the to wait for a client station to respond to an EAPOL
packet before resending it.
EAPOL (Extensible Authentication Protocol over LAN) is used for 802.1X port access control.
802.1X can be used to authenticate at "network connect time" when using either wired or
wireless LAN adapters.
If client stations are configured to manually enter the 802.1X username or password or both,
increase the value of the timeout to 15 to 20 seconds.
Group key update
Enable this option to force updating of 802.1X group keys at the specified Key change interval.
Reauthentication
Enable this option to force 802.1X clients to reauthenticate.
Period
Specify the interval at which client stations must reauthenticate.
Terminate
• Disabled: Client station remains connected during reauthentication. Client traffic is blocked
only when reauthentication fails.
• Enabled: Client traffic is blocked during reauthentication and is only reactivated if
authentication succeeds.
Configuring 802.1X support on an HP 517 or MSM317 switch port
If a switch on the HP 517 or MSM317 port is not bound to a VSC, then 802.11X can be enabled
on it.
802.1X authentication tasks are handled by the HP 517 or MSM317. The HP 517 or MSM317
uses the services of a third-party RADIUS server (configured by defining a RADIUS profile on the
Controller >> Authentication > RADIUS profiles page) to validate user login credentials.
MAC-based authentication
MAC-based authentication can be used to automatically authenticate wired or wireless devices as
soon as they appear on the network, eliminating the need for manual login. This is useful for
MAC-based authentication 339