HP 6125XLG R2306-HP 6125XLG Blade Switch Security Configuration Guide - Page 78

Tasks at a glance (Optional.) Enabling the periodic online user re-authentication function Enabling 802.1X Do not enable 802.1X on a port that is in a link aggregation or service loopback group. To enable 802.1X: Step 1. Enter system view. 2. Enable 802.1X globally. 3. Enter Ethernet interface view. 4. Enable 802.1X on a port. Command system-view dot1x interface interface-type interface-number dot1x Remarks N/A By default, 802.1X is disabled globally. N/A By default, 802.1X is disabled on a port. Enabling EAP relay or EAP termination When configuring EAP relay or EAP termination, consider the following factors: • Support of the RADIUS server for EAP packets • Authentication methods supported by the 802.1X client and the RADIUS server If the client is using only MD5-Challenge EAP authentication or the "username + password" EAP authentication initiated by an HP iNode 802.1X client, you can use both EAP termination and EAP relay. To use EAP-TL, PEAP, or any other EAP authentication methods, you must use EAP relay. When you make your decision, see "A comparison of EAP relay and EAP termination" for help. For more information about EAP relay and EAP termination, see "802.1X authentication procedures." To configure EAP relay or EAP termination: Step 1. Enter system view. 2. Configure EAP relay or EAP termination. Command system-view dot1x authentication-method { chap | eap | pap } Remarks N/A By default, the network access device performs EAP termination and uses CHAP to communicate with the RADIUS server. Specify the eap keyword to enable EAP termination. Specify the chap or pap keyword to enable CHAP-enabled or PAP-enabled EAP relay. 69