HP 10500 Series Configuration Manual page 270

Security configuration guide
Hide thumbs Also See for 10500 Series:
Table of Contents

Advertisement

Configure Host A and Host B as 802.1X users.
Figure 100 Network diagram
Configuration procedure
1.
Add all the ports on Switch B into VLAN 10, and configure the IP address of VLAN-interface 10 on
Switch A. (Details not shown.)
2.
Enable DHCP on Switch A, and configure DHCP address pool 0.
<SwitchA> system-view
[SwitchA] dhcp enable
[SwitchA] dhcp server ip-pool 0
[SwitchA-dhcp-pool-0] network 10.1.1.0 mask 255.255.255.0
3.
Configure Host A and Host B as 802.1X clients and configure them to upload IP addresses for ARP
detection. (Details not shown.)
4.
Configure Switch B:
# Enable the 802.1X function.
<SwitchB> system-view
[SwitchB] dot1x
[SwitchB] interface gigabitethernet 1/0/1
[SwitchB-GigabitEthernet1/0/1] dot1x
[SwitchB-GigabitEthernet1/0/1] quit
[SwitchB] interface gigabitethernet 1/0/2
[SwitchB-GigabitEthernet1/0/2] dot1x
[SwitchB-GigabitEthernet1/0/2] quit
# Add a local user test.
[SwitchB] local-user test
[SwitchB-luser-test] service-type lan-access
[SwitchB-luser-test] password simple test
[SwitchB-luser-test] quit
# Enable ARP detection for VLAN 10 to check user validity based on 802.1X entries.
[SwitchB] vlan 10
[SwitchB-vlan10] arp detection enable
# Configure the upstream port as an ARP-trusted port (a port is an untrusted port by default).
260

Advertisement

Table of Contents
loading

Table of Contents