![](/images/backgrounds/285757/hp-procurve-2600-series-users-manual-550038217x1.png)
Configuring
Configuring Switch Ports To Operate As Supplicants for 802.1X Connections to Other Switches
1.When port A1 on switch “A” is first connected to a port on switch “B”, or if the ports are already connected and either switch reboots, port A1 begins sending start packets to port B5 on switch “B”.
•If, after the supplicant port sends the configured number of start request packets, it does not receive a response, it assumes that switch “B” is not
•If, after sending one or more start request packets, port A1 receives a request packet from port B5, then switch “B” is operating as an 802.1X authenticator. The supplicant port then sends a response/ID packet. If switch “B” is configured for RADIUS authentication, it forwards this request to a RADIUS server. If switch “B” is configured for Local 802.1X authentication (page
2.The RADIUS server then responds with an access challenge that switch “B” forwards to port A1 on switch “A”.
3.Port A1 replies with a hash response based on its unique credentials. Switch “B” forwards this response to the RADIUS server.
4.The RADIUS server then analyzes the response and sends either a “suc- cess” or “failure” packet back through switch “B” to port A1.
•A “success” response unblocks port B5 to normal traffic from port A1.
•A “failure” response continues the block on port B5 and causes port A1 to wait for the
Note | You can configure a switch port to operate as both a supplicant and an |
| authenticator at the same time. |
| Enabling a Switch Port To Operate as a Supplicant. You can configure |
| |
| one or more switch ports to operate as supplicants for |
| |
| supplicant before you can configure any |
| Syntax: [no] aaa |
| Configures a port to operate as a supplicant using either the |
| default supplicant parameters or any previously configured |
| supplicant parameters, whichever is the most recent. The |
| “no” form of the command disables supplicant operation on |
| the specified ports. |