ProCurve 6200yl User's Guide download pdf (Page 458)

100

101

13-6

Configuring Port-Based and User-Based Access Control (802.1X)

Terminology

Note Port-Based 802.1X can operate concurrently with Web-Authentication or

MAC-Authentication on the same port. However, this is not a commonly used

application and is not generally recommended. For more information, refer

to “Operating Notes” on page 13-60.

Alternative To Using a RADIUS Server

Note that you can also configure 802.1X for authentication through the

switch’s local username and password instead of a RADIUS server, but doing

so increases the administrative burden, decentralizes user credential admin-

istration, and reduces security by limiting authentication to one Operator

password set for all users.

Accounting

The switches covered in this guide also provide RADIUS Network accounting

for 802.1X access. Refer to chapter 6, “RADIUS-Administered CoS and Rate-

Limiting”.

Terminology

802.1X-Aware: Refers to a device that is running either 802.1X authenticator

software or 802.1X client software and is capable of interacting with other

devices on the basis of the IEEE 802.1X standard.

Authorized-Client VLAN: Like the Unauthorized-Client VLAN, this is a

conventional, static VLAN previously configured on the switch by the

System Administrator. The intent in using this VLAN is to provide authen-

ticated clients with network services that are not available on either the

port’s statically configured VLAN memberships or any VLAN member-

ships that may be assigned during the RADIUS authentication process.

While an 802.1X port is a member of this VLAN, the port is untagged. When

a port loses its authenticated client connection, it drops its membership

in this VLAN. Note that with multiple clients on a port, all such clients use

the same untagged, port-based VLAN membership.

Authentication Server: The entity providing an authentication service to

the switch when the switch is configured to operate as an authenticator.

In the case of a switch running 802.1X, this is a RADIUS server (unless

1 2 ... 453 454 455 456 457 458 459 460 461 462 463 ... 595 596

Comments to this Manuals

No comments

ProCurve 6200yl User's Guide Page 458

Comments to this Manuals

Related products and manuals for Network switches ProCurve 6200yl