HP 6125G HP 6125G & 6125G/XG Blade Switches Security Configuration Gui - Page 91
Setting the port authorization state
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 91 highlights
Step 2. Configure EAP relay or EAP termination. Command dot1x authentication-method { chap | eap | pap } Remarks Optional. By default, the network access device performs EAP termination and uses CHAP to communicate with the RADIUS server. Specify the eap keyword to enable EAP termination. Specify the chap or pap keyword to enable CHAP-enabled or PAP-enabled EAP relay. NOTE: If EAP relay mode is used, the user-name-format command configured in RADIUS scheme view does not take effect. The access device sends the authentication data from the client to the server without any modification. Setting the port authorization state The port authorization state determines whether the client is granted access to the network. You can control the authorization state of a port by using the dot1x port-control command and the following keywords: • authorized-force-Places the port in the authorized state, enabling users on the port to access the network without authentication. • unauthorized-force-Places the port in the unauthorized state, denying any access requests from users on the port. • auto-Places the port initially in the unauthorized state to allow only EAPOL packets to pass, and after a user passes authentication, sets the port in the authorized state to allow access to the network. You can use this option in most scenarios. You can set authorization state for one port in Ethernet interface view, or for multiple ports in system view. If different authorization state is set for a port in system view and Ethernet interface view, the one set later takes effect. To set the authorization state of a port: Step 1. Enter system view. 2. Set the port authorization state. Command system-view • (Approach 1) In system view: dot1x port-control { authorized-force | auto | unauthorized-force } [ interface interface-list ] • (Approach 2) In Ethernet interface view: a. interface interface-type interface-number b. dot1x port-control { authorized-force | auto | unauthorized-force } Remarks N/A Optional. Use either approach. By default, auto applies. 81