HP ProCurve 3500yl Series User Manual

Configuring Port-Based and Client-Based Access Control (802.1X)
General Setup Procedure for 802.1X Access Control
Overview: Configuring 802.1X Authentication on the
Switch
This section outlines the steps for configuring 802.1X on the switch. For
detailed information on each step, refer to the following:
■ “802.1X Client-Based Access Control” on page 10-4
■ “802.1X Port-Based Access Control” on page 10-5
■ “Configuring Switch Ports To Operate As Supplicants for 802.1X Connec-
tions to Other Switches” on page 10-42.
1. Enable 802.1X client-based or port-based authentication on the individual
ports you want to serve as authenticators. On the ports you will use as
authenticators, either accept the default 802.1X settings or change them,
as necessary. Note that, by default, the port-control parameter is set to
auto for all ports on the switch. This requires a client to support 802.1X
authentication and to provide valid credentials to get network access.
Refer to page
10-17.
2. If you want to provide a path for clients without 802.1X supplicant
software to download the software so that they can initiate an authenti-
cation session, enable the 802.1X Open VLAN mode on the ports you want
to support this feature. Refer to page
10-24.
3. Configure the 802.1X authentication type. Options include:
• Local Operator username and password (the default). This option
allows a client to use the switch’s local username and password as
valid 802.1X credentials for network access.
• EAP RADIUS: This option requires your RADIUS server application
to support EAP authentication for 802.1X.
• CHAP (MD5) RADIUS: This option requires your RADIUS server
application to support CHAP (MD5) authentication.
Refer to page 10-21.
4. If you select either eap-radius or chap-radius for step 3, use the radius host
command to configure up to three RADIUS server IP address(es) on the
switch. See page
10-22.
5. Enable 802.1X authentication on the switch. Refer to “1. Enable 802.1X
Authentication on Selected Ports” on page 10-17.
6. Test both the authorized and unauthorized access to your system to
ensure that the 802.1X authentication works properly on the ports you
have configured for port-access.
10-15

HP ProCurve 3500yl Series Specifications

General

Model	HP ProCurve 3500yl Series
Switching Capacity	176 Gbps
Layer	Layer 3
Input Voltage	100-240 VAC
PoE	Available on some models
Management	Web, CLI, SNMP
Routing Protocol	RIP, OSPF, BGP
Remote Management Protocol	Telnet
Features	VLAN
Power Consumption Operational	Varies by model
Memory	256 MB
Power Supply	Internal
Security Features	802.1X, RADIUS, TACACS+
Ports	24 or 48 x 10/100/1000Base-T ports