HP 4100gl manual Overview , Why Use Port-Based Access Control?, General Features

Configuring Port-Based Access Control (802.1x)

Overview

Overview

Feature Default Menu CLI Web

Configuring Switch Ports as 802.1x Authenticators Configuring 802.1x Open VLAN Mode

Configuring Switch Ports to Operate as 802.1x Supplicants Displaying 802.1x Configuration, Statistics, and Counters How 802.1x Affects VLAN Operation

RADIUS Authentication and Accounting

Disabled	n/a	page 6-14	n/a
Disabled	n/a	page 6-20	n/a
Disabled	n/a	page 6-33	n/a
n/a	n/a	page 6-37	n/a
n/a	n/a	page 6-43	n/a

Refer to “RADIUS Authentication and Accounting” on page 3-1

Why Use Port-Based Access Control?

Local Area Networks are often deployed in a way that allows unauthorized clients to attach to network devices, or allows unauthorized users to get access to unattended clients on a network. Also, the use of DHCP services and zero configuration make access to networking services easily available. This exposes the network to unauthorized use and malicious attacks. While access to the network should be made easy, uncontrolled and unauthorized access is usually not desirable. 802.1x provides access control along with the ability to control user profiles from a central RADIUS server while allowing users access from multiple points within the network.

General Features

802.1x on the Series 4100GL switches includes the following:

■Switch operation as both an authenticator (for supplicants having a point-to-point connection to the switch) and as a supplicant for point-

to-point connections to other 802.1x-aware switches.

•Authentication of 802.1x clients using a RADIUS server and either the EAP or CHAP protocol.

•Provision for enabling clients that do not have 802.1 supplicant soft- ware to use the switch as a path for downloading the software and initiating the authentication process (802.1x Open VLAN mode).

•Supplicant implementation using CHAP authentication and indepen- dent username and password configuration on each port.

■Prevention of traffic flow in either direction on unauthorized ports.

6-2