Configuring RADIUS Server Support for Switch Services

RADIUS Server Configuration for Per-Port CoS (802.1p Priority) and Rate-Limiting

RADIUS Server Configuration forPer-Port CoS (802.1p Priority) and Rate-Limiting

This section provides general guidelines for configuring a RADIUS server to dynamically apply CoS (Class of Service) and Rate-Limiting for inbound traffic on ports supporting authenticated clients. To configure support for these services on a specific RADIUS server application, refer to the documentation provided with the application. (If multiple clients are authenticated on a port where inbound CoS and Rate-Limiting values have been imposed by a RADIUS server, the CoS and Rate-Limiting applied to all clients on the port are those that are assigned by RADIUS for the most recently authenticated client.

Service

Control Method and Operating Notes:

802.1p (CoS) Priority

Vendor-Specific Attribute configured in the RADIUS server.

Assignments on

ProCurve (HP) vendor-specific ID:11

Inbound Traffic

VSA: 40 (string = HP)

This feature assigns a

Setting: HP-COS = xxxxxxxx where:

RADIUS-specified

x = desired 802.1p priority

802.1p priority to all

Note: This is typically an eight-octet field. Enter the same x-value

inbound packets

in all eight octets

received on a port

Requires a port-access (802.1X Web Auth, or MAC Auth)

supporting an

authenticated client.

authentication method configured on the client’s port on the ProCurve

 

switch.

 

For more on 802.1p priority levels, refer to the section titled

 

“Overview” in the “Quality of Service (QoS)” chapter of the Advanced

 

Traffic Management Guide for your switch.

6-4