4-59
Web and MAC Authentication
Configuring MAC Authentication on the Switch
Figure 4-37. Example of Running Configuration Output When RADIUS Response is Configured
HTTP Redirect When MAC Address Not Found
When a client’s MAC address is checked by the RADIUS server against the 
known list of MAC addresses, and the MAC address is not found, the client 
needs a way to quickly become registered through a web registration process. 
The HTTP Redirect feature provides a way for a client who has failed MAC 
authentication to become registered through a web/registration server. Only 
a web browser is required for this authentication process. 
HP Switch(config)# show running-config
Running configuration:
; J9573A Configuration Editor; Created on release #KA.15.03.3003
; Ver #01:00:01
hostname "HP Switch"
module 1 type J9573x
web-management ssl
qos dscp-map 000000 priority 0
no stack auto-join
vlan 1
   name "DEFAULT_VLAN"
   untagged 1-14,19-24
   ip address dhcp-bootp
   no untagged 15-18
   exit
vlan 100
   name "auth-vid"
   untagged 15-18
   ip address dhcp-bootp
   exit
radius-server host 10.0.13.118 key 'secret'
aaa authentication port-access eap-radius
snmp-server community "public" Unrestricted
aaa port-access web-based 5
aaa port-access web-based 5 auth-vid 100
aaa port-access web-based 5 unauth-vid 1
aaa port-access web-based dhcp-addr 172.18.0.0 255.255.255.0
aaa port-access web-based access-denied-message radius-response
RADIUS response configured