HP 3600 v2 Series Configuration Guide

189
Ste
p
Command Remarks
2. Configure MAC authentication.
See "Configuring MAC
authentication"
authentication.
802.1X authentication must use
MAC-based access control.
HP does not recommend you
configure 802.1X guest VLANs
for triple authentication.
3. Configure Layer-2 portal
authentication.
See "Configuring portal
authentication"
Triple authentication configuration examples
Triple authentication basic function configuration example
Network requirements
As shown in Figure 70, the terminals are connected to a switch to access the IP network. Configure triple
authentication on the Layer-2 interface of the switch that connects to the terminals so that a terminal
passing one of the three authentication methods, 802.1X authentication, portal authentication, and MAC
authentication, can access the IP network.
• Configure static IP addresses in network 192.168.1.0/24 for the terminals.
• Use the remote RADIUS server to perform authentication, authorization, and accounting and
configure the switch to send usernames carrying no ISP domain names to the RADIUS server.
• The local portal authentication server on the switch uses listening IP address 4.4.4.4. The switch
sends a default authentication page to the web user and forwards authentication data using HTTP.
Figure 70 Network diagram
Configuration procedure
Make sure that the terminals, the server, and the switch can reach each other.
The host of the web user must have a route to the listening IP address of the local portal server.
1. Configure the RADIUS server, and make sure the authentication, authorization, and accounting
functions work normally. In this example, configure on the RADIUS server an 802.1X user (with
username userdot), a portal user (with username userpt), and a MAC authentication user (with a
username and password both being the MAC address of the printer 001588f80dd7).
2. Configure portal authentication:
IP network
RADIUS server
Switch
1.1.1.2/24
802.1X client
Printer
Web user
Vlan-int3
3.3.3.1
Vlan-int8
192.168.1.1/24
Eth1/0/1
Vlan-int1
1.1.1.1

HP 3600 v2 Series Specifications

General

Brand	HP
Model	3600 v2 Series
Category	Switch
Language	English