HP J8697A, Руководство по обеспечению безопасности доступа

Страница: 277 / 390

Configuring Port-Based and Client-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
Syntax: radius-server key < global key-string >
Specifies the global encryption key the switch uses for
sessions with servers for which the switch does not have
a server-specific key. This key is optional if all RADIUS
server addresses configured in the switch include a
server- specific encryption key.
5. Enable 802.1X Authentication on the Switch
After configuring 802.1X authentication as described in the preceding four
sections, activate it with this command:
Syntax: aaa port-access authenticator active
Activates 802.1X port-access on ports you have configured
as authenticators.
6. Optionally Resetting Authenticator Operation
After authentication has begun operating, these commands can be used to
reset authentication and related statistics on specific ports.
Syntax: aaa port-access authenticator < port-list >
[initialize]
On the specified ports, blocks inbound and outbound
traffic and restarts the 802.1X authentication process.
This happens only on ports configured with
control auto
and actively operating as 802.1X authenticators.
[reauthenticate]
On the specified ports, forces reauthentication (unless
the authenticator is in “HELD” state).
[clear-statistics]
On the specified ports, clears authenticator statistics
counters.
10-23