HP ProCurve 5406zl Access Security Guide

General 802.1X Authenticator Operation . . . . . . . . . . . . . . . . . . . . . . 10-9
Example of the Authentication Process . . . . . . . . . . . . . . . . . . . . . . . . 10-9
VLAN Membership Priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-10
General Operating Rules and Notes . . . . . . . . . . . . . . . . . . . . . . . . . . 10-12
General Setup Procedure for 802.1X Access Control . . . . . . . . . . 10-14
Do These Steps Before You Configure 802.1X Operation . . . . . . . . 10-14
Overview: Configuring 802.1X Authentication on the Switch . . . . . 10-15
Configuring Switch Ports as 802.1X Authenticators . . . . . . . . . . . 10-16
1. Enable 802.1X Authentication on Selected Ports . . . . . . . . . . . . . 10-17
A. Enable the Selected Ports as Authenticators and Enable
the (Default) Port-Based Authentication
. . . . . . . . . . . . . . . 10-17
B. Specify Client-Based or Return to Port-Based 802.1X
Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-18
Example: Configuring Client-Based 802.1X Authentication . . . 10-19
Example: Configuring Port-Based 802.1X Authentication . . . . 10-19
2. Reconfigure Settings for Port-Access . . . . . . . . . . . . . . . . . . . . . . . 10-19
3. Configure the 802.1X Authentication Method . . . . . . . . . . . . . . . . 10-21
4. Enter the RADIUS Host IP Address(es) . . . . . . . . . . . . . . . . . . . . . 10-22
5. Enable 802.1X Authentication on the Switch . . . . . . . . . . . . . . . . 10-23
6. Optionally Resetting Authenticator Operation . . . . . . . . . . . . . . . 10-23
802.1X Open VLAN Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-24
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-24
VLAN Membership Priorities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-25
Use Models for 802.1X Open VLAN Modes . . . . . . . . . . . . . . . . . . . . 10-26
Operating Rules for Authorized-Client and
Unauthorized-Client VLANs
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-31
Setting Up and Configuring 802.1X Open VLAN Mode . . . . . . . . . . . 10-35
802.1X Open VLAN Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . 10-39
Option For Authenticator Ports: Configure Port-Security
To Allow Only 802.1X-Authenticated Devices . . . . . . . . . . . . . . . . . 10-40
Port-Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-41
Configuring Switch Ports To Operate As Supplicants for 802.1X
Connections to Other Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-42
Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-42
Supplicant Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-44
xi

HP ProCurve 5406zl Specifications

General

Product Name	HP ProCurve 5406zl
Category	Switch
Layer	Layer 3
Operating Temperature	32°F to 131°F (0°C to 55°C)
Operating Humidity	15% to 95% non-condensing
Management	SNMP, CLI
Power Supply	Redundant power supplies (optional)
Memory	128 MB flash, 512 MB SDRAM