192
Configuring triple authentication
Follow these steps to configure triple authentication:
To do… Use the command…
Remarks
Configure 802.1X authentication
See the chapter “802.1X
configuration”
Required
Configure at least one
type of authentication.
Configure MAC authentication
See the chapter “MAC authentication
configuration”
Configure Layer-2 portal authentication
See the chapter “Portal configuration”
NOTE:
• 802.1X authentication must use MAC-based access control.
• HP does not recommend you configure 802.1X guest VLANs for triple authentication.
Triple authentication configuration examples
Triple authentication basic function configuration example
Network requirements
As shown in Figure 86, the terminals are connected to a switch to access the IP network. Configure triple
authentication on the Layer-2 interface of the switch that connects to the terminals so that a terminal
passing one of the three authentication methods, 802.1X authentication, portal authentication, and MAC
authentication, can access the IP network.
• Configure static IP addresses in network 192.168.1.0/24 for the terminals.
• Use the remote RADIUS server to perform authentication, authorization, and accounting and
configure the switch to send usernames carrying no ISP domain names to the RADIUS server.
• The local portal authentication server on the switch uses listening IP address 4.4.4.4. The switch
sends a default authentication page to the web user and forwards authentication data using HTTP.
Figure 86 Network diagram
Configuration procedure
To Next Page
Loading...
Need help?
General