Web and MAC Authentication
General Setup Procedure for Web/MAC Authentication
■ Web- or MAC-based authentication and LACP cannot both be enabled
on the same port.
Note on Web/ The switch does not allow Web or MAC Authentication and LACP to both be
MAC
enabled at the same time on the same port. The switch automatically disables
Authentication
LACP on ports configured for Web or MAC Authentication.
and LACP
General Setup Procedure for Web/MAC
Authentication
Do These Steps Before You Configure Web/MAC
Authentication
1. Configure a local username and password on the switch for both the
Operator (login) and Manager (enable) access levels. (While this is not
required for a Web- or MAC-based configuration, ProCurve recommends
that you use a local user name and password pair, at least until your other
security measures are in place, to protect the switch configuration from
unauthorized access.)
2. Determine which ports on the switch you want to operate as authentica-
tors. Note that before you configure Web- or MAC-based authentication
on a port operating in an LACP trunk, you must remove the port from the
trunk. (refer to the
“Note on Web/MAC Authentication and LACP” on
page 4-12.)
3. Determine whether any VLAN assignments are needed for authenticated
clients.
a. If you configure the RADIUS server to assign a VLAN for an authen-
ticated client, this assignment overrides any VLAN assignments con-
figured on the switch while the authenticated client session remains
active. Note that the VLAN must be statically configured on the
switch.
b. If there is no RADIUS-assigned VLAN, the port can join an “Authorized
VLAN” for the duration of the client session, if you choose to configure
one. This must be a port-based, statically configured VLAN on the
switch.
4-12
To Next Page
Loading...
Need help?
General
