HP ProCurve 3400cl-24G Access Security Guide

Configuring Port-Based and Client-Based Access Control (802.1X)
General Setup Procedure for Port-Based Access Control (802.1X)
General Setup Procedure for Port-Based
Access Control (802.1X)
Do These Steps Before You Configure 802.1X Operation
1. Configure a local username and password on the switch for both the
Operator (login) and Manager (enable) access levels. (While this may or
may not be required for your 802.1X configuration, HP recommends that
you use a local username and password pair at least until your other
security measures are in place.)
2. Determine which ports on the switch you want to operate as authentica-
tors and/or supplicants, and disable LACP on these ports. (See the “Note”
on page 10-15.)
3. Determine whether to use the optional 802.1X Open VLAN mode for
clients that are not 802.1X-aware; that is, for clients that are not running
802.1X supplicant software. (This will require you to provide download
-
able software that the client can use to enable an authentication session.)
For more on this topic, refer to
“802.1X Open VLAN Mode” on page 10-21.
4. For any port you want to operate as a supplicant, determine a username
and password pair. You can either use the same pair for each port or use
unique pairs for individual ports or subgroups of ports. (This can also be
the same local username/password pair that you assign to the switch.)
5. Unless you are using only the switch’s local username and password for
802.1X authentication, configure at least one RADIUS server to authenti
-
cate access requests coming through the ports on the switch from external
supplicants (including switch ports operating as 802.1X supplicants). You
can use up to three RADIUS servers for authentication; one primary and
two backups. Refer to the documentation provided with your RADIUS
application.
Overview: Configuring 802.1X Authentication on the
Switch
This section outlines the steps for configuring 802.1X on the switch. For
detailed information on each step, refer to
“Configuring Port-Based and Client-
Based Access Control (802.1X)” on page 10-1 or “Configuring Switch Ports To
Operate As Supplicants for 802.1X Connections to Other Switches” on page 10-
38.
10-13

HP ProCurve 3400cl-24G Specifications

General

Brand	HP
Model	ProCurve 3400cl-24G
Category	Switch
Language	English