HP E3800 Series, Access Security Manual

Page: 596 / 732

13-24
Configuring Port-Based and User-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
3. Configure the 802.1X Authentication Method
This task specifies how the switch authenticates the credentials provided by
a supplicant connected to a switch port configured as an 802.1X authenticator
You can configure
local
,
chap-radius
or
eap-radius
as the primary password
authentication method for the port-access method. You also need to select
none or authorized as a secondary, or backup, method.
Syntax: aaa authentication port-access <chap-radius |eap-radius | local>
Configures
local
,
chap-radius ( MD5 )
, or
eap-radius
as the primary
password authentication method for port-access. The default pri-
mary authentication is
local
. (Refer to the documentation for
your RADIUS server application.)
For switches covered in this guide, you must use the
password port-access command to configure the operator user-
name and password for 802.1X access. See “General Setup Proce-
dure for 802.1X Access Control” on page 13-13 for more
information.
[<none | authorized >]
Provides options for secondary authentication. The
none
option specifies that a backup authentication
method is not used. The
authorized
option allows access
without authentication. (default:
none
).