HP E3800 Series, Руководство по обеспечению безопасности доступа

Страница: 599 / 732

13-27
Configuring Port-Based and User-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
6. Optional: Reset Authenticator Operation
While 802.1X authentication is operating, you can use the following
aaa port-
access authenticator
commands to reset 802.1X authentication and statistics
on specified ports.
7. Optional: Configure 802.1X Controlled Directions
After you enable 802.1X authentication on specified ports, you can use the
aaa
port-access controlled-directions
command to configure how a port transmits
traffic before it successfully authenticates a client and enters the authenti-
cated state.
As documented in the IEEE 802.1X standard, an 802.1X-aware port that is
unauthenticated can control traffic in either of the following ways:
■ In both ingress and egress directions by disabling both the reception of
incoming frames and transmission of outgoing frames
■ Only in the ingress direction by disabling only the reception of incoming
frames.
Syntax: aaa port-access authenticator < port-list >
[initialize]
On the specified ports, blocks inbound and outbound
traffic and restarts the 802.1X authentication process.
This happens only on ports configured with
control auto
and actively operating as 802.1X authenticators.
[reauthenticate]
On the specified ports, forces reauthentication (unless
the authenticator is in “HELD” state).
[clear-statistics]
On the specified ports, clears authenticator statistics
counters.