HP ProCurve NAC 800, User Manual

Page: 378 / 591

802.1X Quarantine Method
Setting up the 802.1X Components
11-60
■ IS_TELNET
– Set to "true" for a telnet connection (otherwise unset)
■ IS_SSH
– Set to "true" for an SSH connection (otherwise unset)
The following variables may be referenced from re-authentication script:
■ PORT
– The endpoint's port
■ PORT_ID – The endpoint's port ID, usually the same as PORT
■
MAC
– The MAC address of the endpoint in colon/hex format
(hh:hh:hh:hh:hh:hh)
■
MAC_DOTTED_DECIMAL
– The MAC address of the endpoint in dotted
decimal format (ddd.ddd.ddd.ddd.ddd.ddd)
■
MAC_DOTTED_HEX
– The MAC address of the endpoint in dotted hex format
(hhhh.hhhh.hhhh)
■
IP_ADDRESS
– The IP address of the endpoint in dotted decimal format
■
IS_MAC_AUTH
– Set to "true" if the username from the switch is a MAC
address (otherwise unset)
■
IS_DOT1X
– Set to "true" if the username from the switch is not a MAC
address (otherwise unset)
Escape Sequences: Special characters can be included by escaping them as "\XXX"
where XXX is an octal value representing an ASCII character, or as "\uXXXX" where
XXXX is a hexadecimal value representing a unicode character.
Comments: Lines that start with the # character are ignored.
Examples:
Initialization script:
expect Enter Ctrl-Y to begin.
send -noreturn \031
expect -ifset IS_TELNET Username:
send -ifset IS_TELNET ${USERNAME}
expect -ifset IS_TELNET Password:
send -ifset IS_TELNET ${PASSWORD}
expect press or to select option.
send -noreturn c
expect >
send enable
expect -ifset ENABLE_USERNAME Username:
send -ifset ENABLE_USERNAME ${ENABLE_USERNAME}
expect -ifset ENABLE_PASSWORD Password:
send -ifset ENABLE_PASSWORD ${ENABLE_PASSWORD}
expect #
send configure terminal