HP E-MSM310, Management And Configuration Manual

Page: 132 / 210

Network configuration
802.1X supplicant
5-20
802.1X supplicant
The 802.1X supplicant can be used when the AP is connected to a secure switch port that
requires 802.1X authentication. To configure the 802.1X supplicant, select Network >
802.1X supplicant.
Important
 If this option is enabled and the AP is connected to a unsecured switch port, 802.1X is
ignored.
 The AP always performs 802.1X authentication without VLAN tagging. The switch port is
expected to be multi-homed, so that once authentication is successful, tagged and
untagged traffic for any MAC addresses (including wireless clients) will be accepted by
the switch.
 VLAN attributes received in the RADIUS access accept are not provided to other
applications running on the AP.
 The AP sends the EAPOL start and waits for the Request Identity. On a time-out, the AP
will perform a single retry. On a second time-out, the 802.1X supplicant will become idle.
The switch is responsible for restarting the IEEE 802.1X authentication by sending an
EAP Request Identity.
EAP Method
Select the extensible authentication protocol method to use:
 PEAP version 0: Authentication occurs using MS-CHAP V2.
 PEAP version 1 : Authentication occurs using EAP-GTC.
 TTLS: The Tunneled Transport Layer Security protocol requires that the switch first
authenticate itself to the AP by sending a PKI certificate. The AP authenticates itself to
the switch by supplying a username and password over the secure tunnel.
Username
Username that the AP will use inside the TLS tunnel.
Password / Confirm password
Password assigned to the AP.