ProCurve Series 2300 and 2500 Switches Release Notes

28
Enhancements in Release F.05.xx
Configuring Port-Based Access Control (802.1x)
6. Test both the authorized and unauthorized access to your system to ensure that the 802.1x
authentication works properly on the ports you have configured for port-access.
Note
If you want to implement the optional port security feature (step 7) on the switch, you should first
ensure that the ports you have configured as 802.1x authenticators operate as expected.
7. If you are using Port Security on the switch, configure the switch to allow only 802.1x access
on ports configured for 802.1x operation, and (if desired) the action to take if an unauthorized
device attempts access through an 802.1x port. See page 45.
8. If you want a port on the switch to operate as a supplicant in a connection with a port operating
as an 802.1x authenticator on another device, then configure the supplicant operation. (Refer
to “Configuring Switch Ports To Operate As Supplicants for 802.1x Connections to Other
Switches” on page -47.)
Configuring Switch Ports as 802.1x Authenticators
802.1x Authentication Commands Page
[no] aaa port-access authenticator < [ethernet] < port-list >29
[control | quiet-period | tx-period | supplicant-timeout |
server-timeout | max-requests | reauth-period | auth-vid |
unauth-vid | initialize | reauthenticate | clear-statistics]
29
aaa authentication port-access 32
< local | eap-radius | chap-radius >
[no] aaa port-access authenticator active 28
[no] port-security [ethernet] < port-list > learn-mode port-access 45
802.1x Open VLAN Mode Commands 34
802.1x Supplicant Commands 47
802.1x-Related Show Commands 51
RADIUS server configuration 33