HP 1910 User Manual

356
• Handshake timer—Sets the interval at which the access device sends client handshake requests to
check the online status of a client that has passed authentication. If the device receives no response
after sending the maximum number of handshake requests, it considers that the client has logged
off.
• Quiet timer—Starts when the access device sends a RADIUS Access-Request packet to the
authentication server. If no response is received when this timer expires, the access device
retransmits the request to the server.
• Periodic online user re-authentication timer—Sets the interval at which the network device
periodically re-authenticates online 802.1X users. The change to the periodic re-authentication
timer applies to the users that have been online only after the old timer expires.
Using 802.1X authentication with other features
VLAN assignment
You can configure the authentication server to assign a VLAN for an 802.1X user that has passed
authentication. The way that the network access device handles VLANs on an 802.1X-enabled port
differs by 802.1X access control mode.
Access control VLAN manipulation
Port-based
The device assigns the VLAN to the port as the port VLAN (PVID). The authenticated
802.1X user and all subsequent 802.1X users can access the VLAN without
authentication.
When the user logs off, the previous PVID restores, and all other online users are
logged off.
MAC-based
If the port is an access, trunk, or hybrid port, the device assigns the first
authenticated user's VLAN to the port as the PVID. If a different VLAN is assigned to
a subsequent user, the user cannot pass the authentication. To avoid the
authentication failure of subsequent users, be sure to assign the same VLAN to all
802.1X users on these ports.
NOTE:
W
ith 802.1X authentication, a hybrid port is always assi
g
ned to a VLAN as an unta
gg
ed member. After
the assignment, do not reconfigure the port as a tagged member in the VLAN.
Guest VLAN
You can configure a guest VLAN on a port to accommodate users that have not performed 802.1X
authentication, so they can access a limited set of network resources, such as a software server, to
download anti-virus software and system patches. After a user in the guest VLAN passes 802.1X
authentication, it is removed from the guest VLAN and can access authorized network resources.
The network device supports guest VLAN only on the port that performs port-based access control. The
Following describes the way how the network access device handles VLANs on such port

HP 1910 Specifications

General

Brand	HP
Model	1910
Category	Switch
Language	English