ProCurve 2900 - Setup Procedure for Web;MAC Authentication

Web and MAC Authentication
Setup Procedure for Web/MAC Authentication
■ Web- or MAC-based authentication and LACP cannot both be enabled
on the same port.
Web/MAC Web or MAC authentication and LACP are not supported at the same time on
Authentication
a port. The switch automatically disables LACP on ports configured for Web
and LACP
or MAC authentication.
■ Use the show port-access web-based commands to display session
status, port-access configuration settings, and statistics for Web-Auth
sessions.
■ Because enhanced web authentication is configured per switch, each
Web-Auth enabled port displays the customized web pages you
prepare for client login. The use of customized web pages is enabled
after you configure the valid IP address or host name of an EWA
server.
Setup Procedure for Web/MAC
Authentication
Before You Configure Web/MAC Authentication
1. Configure a local username and password on the switch for both the
Operator (login) and Manager (enable) access levels. (While this is not
required for a Web- or MAC-based configuration, ProCurve recommends
that you use a local user name and password pair, at least until your other
security measures are in place, to protect the switch configuration from
unauthorized access.)
2. Determine the switch ports that you want to configure as authenticators.
Note that before you configure Web- or MAC-based authentication on a
port operating in an LACP trunk, you must remove the port from the trunk.
(For more information, refer to the “Web/MAC Authentication and LACP”
on page 3-14.)
To display the current configuration of 802.1X, Web-based, and MAC
authentication on all switch ports, enter the show port-access config
command.
3-14