HP ProCurve 3500yl Series User Manual

10
Configuring Port-Based and
Client-Based Access Control (802.1X)
Contents
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-3
Why Use Port-Based or Client-Based Access Control? . . . . . . . . . . . 10-3
General Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-3
User Authentication Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4
802.1X Client-Based Access Control . . . . . . . . . . . . . . . . . . . . . . . 10-4
802.1X Port-Based Access Control . . . . . . . . . . . . . . . . . . . . . . . . 10-5
Alternative To Using a RADIUS Server . . . . . . . . . . . . . . . . . . . . . 10-6
Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-6
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-6
General 802.1X Authenticator Operation . . . . . . . . . . . . . . . . . . . . . . 10-9
Example of the Authentication Process . . . . . . . . . . . . . . . . . . . . . . . . 10-9
VLAN Membership Priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-10
General Operating Rules and Notes . . . . . . . . . . . . . . . . . . . . . . . . . . 10-12
General Setup Procedure for 802.1X Access Control . . . . . . . . . . 10-14
Do These Steps Before You Configure 802.1X Operation . . . . . . . . 10-14
Overview: Configuring 802.1X Authentication on the Switch . . . . . 10-15
Configuring Switch Ports as 802.1X Authenticators . . . . . . . . . . . 10-16
1. Enable 802.1X Authentication on Selected Ports . . . . . . . . . . . . . 10-17
A. Enable the Selected Ports as Authenticators and Enable
the (Default) Port-Based Authentication . . . . . . . . . . . . . . . 10-17
B. Specify Client-Based or Return to Port-Based 802.1X
Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-18
Example: Configuring Client-Based 802.1X Authentication . . . 10-19
Example: Configuring Port-Based 802.1X Authentication . . . . 10-19
2. Reconfigure Settings for Port-Access . . . . . . . . . . . . . . . . . . . . . . . 10-19
10-1

HP ProCurve 3500yl Series Specifications

General

Model	HP ProCurve 3500yl Series
Switching Capacity	176 Gbps
Layer	Layer 3
Input Voltage	100-240 VAC
PoE	Available on some models
Management	Web, CLI, SNMP
Routing Protocol	RIP, OSPF, BGP
Remote Management Protocol	Telnet
Features	VLAN
Power Consumption Operational	Varies by model
Memory	256 MB
Power Supply	Internal
Security Features	802.1X, RADIUS, TACACS+
Ports	24 or 48 x 10/100/1000Base-T ports