Enabling Eap Relay Or Eap Termination; Setting The Port Authorization State - HP 12500 Series Configuration Manual

3. Enable 802.1X on a port in
system or Ethernet interface
view.

Enabling EAP relay or EAP termination

When configuring EAP relay or EAP termination, consider the following factors:
The support of the RADIUS server for EAP packets
•
• The authentication methods supported by the 802.1X client and the RADIUS server
If the client supports only MD5-Challenge EAP authentication, you can use both EAP termination and
EAP relay. To use EAP-TL, PEAP, or any other EAP authentication methods, you must use EAP relay. When
you make your decision, see "A comparison of EAP relay and EAP termination" for help.
For more information about EAP relay and EAP termination, see "802.1X authentication procedures."
To configure EAP relay or EAP termination:
Step
1. Enter system view.
2. Configure EAP relay or
EAP termination.
NOTE:
If EAP relay mode is used, the user-name-format command configured in RADIUS scheme view does not
take effect. The access device sends the authentication data from the client to the server without any
modification.

Setting the port authorization state

The port authorization state determines whether the client is granted access to the network. You can
control the authorization state of a port by using the dot1x port-control command and the following
keywords:
authorized-force—Places the port in the authorized state, enabling users on the port to access the
•
network without authentication.
unauthorized-force—Places the port in the unauthorized state, denying any access requests from
•
users on the port.
•
In system view:
dot1x interface interface-list
•
In Ethernet interface view:
a. interface interface-type
interface-number
b. dot1x
Command
system-view
dot1x
authentication-method
{ chap | eap | pap }
80
By default, 802.1X is disabled on
a port.
Remarks
N/A
By default, the network access device performs
EAP termination and uses CHAP to communicate
with the RADIUS server.
Specify the eap keyword to enable EAP
termination.
Specify the chap or pap keyword to enable
CHAP-enabled or PAP-enabled EAP relay.