To Next Page

To Previous Page

Web and MAC Authentication

How Web and MAC Authentication Operate

You configure access to an optional, unauthorized VLAN when you configure

Web and MAC authentication on a port.

RADIUS-Based Authentication

In Web and MAC authentication, you use a RADIUS server to temporarily

assign a port to a static VLAN to support an authenticated client. When a

RADIUS server authenticates a client, the switch-port membership during the

client’s connection is determined according to the following hierarchy:

1. A RADIUS-assigned VLAN

2. An authorized VLAN specified in the Web- or MAC-Auth configuration for

the subject port.

3. A static, port-based, untagged VLAN to which the port is configured. A

RADIUS-assigned VLAN has priority over switch-port membership in any

VLAN.

Wireless Clients

You can allow wireless clients to move between switch ports under Web/MAC

Authentication control. Clients may move from one Web-authorized port to

another or from one MAC-authorized port to another. This capability allows

wireless clients to move from one access point to another without having to

reauthenticate.

How Web and MAC Authentication

Operate

Before gaining access to the network, a client first presents authentication

credentials to the switch. The switch then verifies the credentials with a

RADIUS authentication server. Successfully authenticated clients receive

access to the network, as defined by the System Administrator. Clients who

fail to authenticate successfully receive no network access or limited network

access as defined by the System Administrator.

3-5

Other manuals for HP PROCURVE 2910AL

Questions and Answers:

Need help?

Do you have a question about the HP PROCURVE 2910AL and is the answer not in the manual?

General