HP E3800 Series, Руководство по обеспечению безопасности доступа

Страница: 621 / 732

13-49
Configuring Port-Based and User-Based Access Control (802.1X)
Option For Authenticator Ports: Configure Port-Security To Allow Only 802.1X-Authenticated Devices
reauthenticate itself. If there are multiple clients authenticated on the
port, if one client loses access and attempts to re-authenticate, that client
will be handled as a new client on the port.
■ The first client to authenticate on a port configured to support multiple
clients will determine the port’s VLAN membership for any subsequent
clients that authenticate while an active session is already in effect.
Option For Authenticator Ports:
Configure Port-Security
To Allow Only 802.1X-Authenticated
Devices
If 802.1X authentication is disabled on a port or set to
authorized
(Force
Authorize), the port can allow access to a non-authenticated client. Port-
Security operates with 802.1X authentication only if the selected ports are
configured as 802.1X
with the
control
mode in the port-access authenticator
command set to
auto
(the default setting). For example, if port A10 was at a
non-default 802.1X setting and you wanted to configure it to support the port-
security option, you would use the following
aaa port-access
command:
Figure 13-9. Port-Access Support for Port-Security Operation
HP Switch(config)# aaa port-access authenticator 10 control auto
HP Switch(config)# show port-access authenticator 10 config
Port Access Authenticator Configuration
Port-access authenticator activated [No] : Yes
Allow RADIUS-assigned dynamic (GVRP) VLANs [No] : No
| Re-auth Access Max Quiet TX Supplicant Server Cntrl
Port | Period Control Reqs Period Timeout Timeout Timeout Dir
---- + ------- -------- ----- ------- -------- ---------- -------- -----
A10 | No Auto 2 60 30 30 30 both
Control mode
required for Port-
Security Support