To Next Page

To Previous Page

13-35

Configuring Port-Based and User-Based Access Control (802.1X)

802.1X Open VLAN Mode

Table 13-1. 802.1X Open VLAN Mode Options

802.1X Per-Port Configuration Port Response

No Open VLAN mode: The port automatically blocks a client that cannot initiate an

authentication session.

Open VLAN mode with both of the following configured:

Unauthorized-Client VLAN • When the port detects a client without 802.1X supplicant

capability, it automatically becomes an untagged member of this

VLAN. If you previously configured the port as a static, tagged

member of the VLAN, membership temporarily changes to

untagged while the client remains unauthenticated.

• If the port already has a statically configured, untagged

membership in another VLAN, then the port temporarily closes

access to this other VLAN while in the Unauthorized-Client VLAN.

• To limit security risks, the network services and access available

on the Unauthorized-Client VLAN should include only what a client

needs to enable an authentication session. If the port is statically

configured as a tagged member of any other VLANs, access to

these VLANs is blocked while the port is a member of the

Unauthorized-Client VLAN.

Note for a Port Configured To Allow Multiple Client Sessions: If any

previously authenticated clients are using a port assigned to a VLAN

other than the Unauthorized-Client VLAN, then a later client that is

not running 802.1X supplicant software is blocked on the port until all

other, authenticated clients on the port have disconnected.

Other manuals for HP 3500yl Series

Questions and Answers:

Need help?

Do you have a question about the HP 3500yl Series and is the answer not in the manual?

General