13-29
Configuring Port-Based and User-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
Operating Notes
■ Using the aaa port-access controlled-directions in command, you can enable
the transmission of Wake-on-LAN traffic on unauthenticated egress ports
that are configured for any of the following port-based security features:
• 802.1X authentication
• MAC authentication
• Web authentication
Because a port can be configured for more than one type of authentication
to protect the switch from unauthorized access, the last setting you
configure with the aaa port-access controlled-directions command is
applied to all authentication methods configured on the switch.
For information about how to configure and use MAC and Web
authentication, refer to chapter 4, “Web and MAC Authentication”.
■ To display the currently configured 802.1X Controlled Directions value,
enter the show port-access authenticator config command as shown in
Figure 13-12.
■ When an 802.1X-authenticated port is configured with the controlled-
directions in setting, eavesdrop prevention is not supported on the
port.
Example: Configuring 802.1X Controlled Directions
The following example shows how to enable the transmission of Wake-on-
LAN traffic in the egress direction on an 802.1X-aware port before it transitions
to the 802.1X authenticated state and successfully authenticates a client
device.
Figure 13-7. Example of Configuring 802.1X Controlled Directions
Unauthenticated VLAN Access (Guest VLAN Access)
When a PC is connected through an IP phone to a switch port that has been
authorized using 802.1X or Web/MAC authentication, the IP phone is authen-
ticated using client-based 802.1X or Web/MAC authentication and has access
to secure, tagged VLANs on the port. If the PC is unauthenticated, it needs to
HP Switch(config)# aaa port-access authenticator 10
HP Switch(config)# aaa authentication port-access eap-radius
HP Switch(config)# aaa port-access authenticator active
HP Switch(config)# aaa port-access 10 controlled-directions in