HP 5920 Series Configuration Guide

71
Tasks at a
g
lance
(Optional.) Configuring the quiet timer
(Optional.) Enabling the periodic online user reauthentication feature
Enabling 802.1X
When you enable 802.1X, do not enable 802.1X on a port that is in a link aggregation or service
loopback group.
To enable 802.1X:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable 802.1X globally.
dot1x
By default, 802.1X is disabled
globally.
3. Enter Layer 2 Ethernet
interface view.
interface interface-type interface-number N/A
4. Enable 802.1X on a port.
dot1x
By default, 802.1X is disabled
on a port.
Enabling EAP relay or EAP termination
When configuring EAP relay or EAP termination, consider the following factors:
• Support of the RADIUS server for EAP packets
• Authentication methods supported by the 802.1X client and the RADIUS server
If the client is using only MD5-Challenge EAP authentication or the "username + password" EAP
authentication initiated by an HP iNode 802.1X client, you can use both EAP termination and EAP relay.
To use EAP-TL, PEAP, or any other EAP authentication methods, you must use EAP relay. When you make
your decision, see "Comparing EAP relay and EAP termination" fo
r help.
For more information about EAP relay and EAP termination, see "802.1X authentication procedures."
T
o configure EAP relay or EAP termination:
Ste
p
Command Remarks
1. Enter system
view.
system-view N/A
2. Configure EAP
relay or EAP
termination.
dot1x authentication-method
{ chap | eap | pap }
By default, the network access device performs EAP
termination and uses CHAP to communicate with the
RADIUS server.
Specify the eap keyword to enable EAP relay.
Specify the chap or pap keyword to enable
CHAP-enabled or PAP-enabled EAP termination.

HP 5920 Series Specifications

General

Brand	HP
Model	5920 Series
Category	Switch
Language	English