MSM7xx Controllers Configuration Guide v6.4.0

• BSSID: Basic service set ID of the wireless network defined for this VSC.
• macaddress:ssid: The MAC address of the AP radio, followed by a colon, followed by
the SSID configured on this VSC.
Configuring global 802.1X settings for wired users
Configure global 802.1X settings by selecting Controller >> Authentication > 802.1X.
These settings only apply to:
• Wired clients connected to the controller via the LAN port.
• Wireless clients using an access-controlled VSC with Wireless protection set to WPA and the
Terminate WPA at the controller option enabled. See “Terminate WPA at the controller”
(page 129).
These settings do not apply to clients connected to the switch port on the HP 517 or MSM317.
Supplicant timeout
Specify the maximum length of time that the controller will wait for a client station to respond
to an EAPOL packet before resending it.
If client stations are configured to manually enter the 802.1X username and/or the password,
you must increase the value of the timeout to between 15 and 20 seconds.
Reauthentication
Enable this option to force 802.1X clients to re-authenticate after the specified Period.
• Period: Client stations must re-authenticate after this amount of time has passed since their
last reauthentication.
• Terminate
Disabled: Client stations remain connected during re-authentication and client traffic
is blocked only when re-authentication fails.
◦
◦ Enabled: Client traffic is blocked during re-authentication and is only activated again
if authentication succeeds.
Configuring global 802.1X settings for wireless users
Global 802.1X settings for wireless users connected to controlled APs are defined by selecting
Controlled APs >> Configuration > 802.1X.
338 User authentication, accounts, and addressing