HP ProCurve 3500yl Series User Manual

Configuring Port-Based and Client-Based Access Control (802.1X)
Overview
Overview
Feature Default Menu CLI Web
Configuring Switch Ports as 802.1X Authenticators Disabled n/a page 10-16 n/a
Configuring 802.1X Open VLAN Mode Disabled n/a page 10-24 n/a
Configuring Switch Ports to Operate as 802.1X Supplicants Disabled n/a page 10-42 n/a
Displaying 802.1X Configuration, Statistics, and Counters n/a n/a page 10-46 n/a
How 802.1X Affects VLAN Operation n/a n/a page 10-53 n/a
RADIUS Authentication and Accounting Refer to chapter 6, “RADIUS Authentication and
Accounting”
Why Use Port-Based or Client-Based Access Control?
Local Area Networks are often deployed in a way that allows unauthorized
clients to attach to network devices, or allows unauthorized users to get
access to unattended clients on a network. Also, the use of DHCP services and
zero configuration make access to networking services easily available. This
exposes the network to unauthorized use and malicious attacks. While access
to the network should be made easy, uncontrolled and unauthorized access is
usually not desirable. 802.1X simplifies security management by providing
access control along with the ability to control user profiles from up to three
RADIUS servers while allowing a given user to use the same entering valid
user credentials for access from multiple points within the network.
General Features
802.1X on the switches covered in this guide includes the following:
■ Switch operation as both an authenticator (for supplicants having a point-
to-point connection to the switch) and as a supplicant for point-to-point
connections to other 802.1X-aware switches.
• Authentication of 802.1X access using a RADIUS server and either the
EAP or CHAP protocol.
• Provision for enabling clients that do not have 802.1 supplicant soft-
ware to use the switch as a path for downloading the software and
initiating the authentication process (802.1X Open VLAN mode).
• Client-Based access control option with support for up to 32 authen-
ticated clients per-port.
10-3

HP ProCurve 3500yl Series Specifications

General

Model	HP ProCurve 3500yl Series
Switching Capacity	176 Gbps
Layer	Layer 3
Input Voltage	100-240 VAC
PoE	Available on some models
Management	Web, CLI, SNMP
Routing Protocol	RIP, OSPF, BGP
Remote Management Protocol	Telnet
Features	VLAN
Power Consumption Operational	Varies by model
Memory	256 MB
Power Supply	Internal
Security Features	802.1X, RADIUS, TACACS+
Ports	24 or 48 x 10/100/1000Base-T ports