HP E3800 Series, Access Security Manual

Page: 178 / 732

4-64
Web and MAC Authentication
Configuring MAC Authentication on the Switch
Using the CLI. To reauthenticate a client using the CLI, use this command:
HP Switch(config)# aaa port-access mac-based <single-
port>
reauthenticate mac-addr <MAC address>
The keyword
mac-addr
specifies single client reauthentication. If the
reauthenticate
parameter is entered without the
mac-addr
keyword and MAC
address, the command is executed as port reauthentication—all clients on a
port are reauthenticated.
Configuring the Registration Server URL
To configure the registration server URL, the command is:
HP Switch(config)# aaa port-access mac-based
unauth-redirect <URL>
For example:
HP Switch(config)# aaa port-access mac-based
unauth-redirect https://serverA.com:124/
registration server/reg.html
Unconfiguring a MAC-Auth Registration Server
Each configured registration server’s URL must be removed by specifying it
exactly, for example:
HP Switch(config)# no aaa port-access mac-based
unauth-redirect https://serverA.com:124/
registration server/reg.html
Operating Notes for HTTP Redirect
■ If the configured URL contains a domain name (as opposed to an IP
address) the switch’s DNS resolver must be configured:
HP Switch(config)# ip dns server-address priority
1 <ipv4-address>
■ The NAT does an IP route lookup before it sends the packet to the
destination registration server. A VLAN must have been configured
that allows the switch to access the registration server.
■ The initial page, redirect server, and filter path configuration will be
per-switch.