79
Enhancements
Release L.11.08 Enhancements
Figure 2. Using the show run Command to View the Current Authentication MIB Access State
How RADIUS-Based Authentication Affects VLAN Operation
Using a RADIUS server to authenticate clients, you can provide port-level security protection from
unauthorized network access for the following authentication methods:
■
802.1X: Port-based or client-based access control to open a port for client access after
authenticating valid user credentials.
■
MAC address: Authenticates a device’s MAC address to grant access to the network.
■
Web-browser interface: Authenticates clients for network access using a web page for user
login.
N o t e
You can use 802.1X (port-based or client-based) authentication and either Web or MAC authentication
at the same time on a port, with a maximum of 32 clients allowed on the port. (The default is one
client.) Web authentication and MAC authentication are mutually exclusive on the same port. Also,
you must disable LACP on ports configured for any of these authentication methods. For more
information, refer to the “Configuring Port-Based Access Control (802.1X)” and “Web and MAC
Authentication” chapters of the
Access Security Guide
.
ProCurve(config)# show run
Running configuration:
; J8165A Configuration Editor; Created on release #H.10.32
hostname "ProCurve"
snmp-server mib hpSwitchAuthMIB excluded
ip default-gateway 10.10.24.55
snmp-server community "public" Operator
vlan 1
name "DEFAULT_VLAN"
untagged 1-50
ip address 10.10.24.100 255.255.255.0
exit
ProCurve(config)#
Indicates that SNMP access to the
authentication configuration MIB
(hpSwitchAuth) is disabled.
