Configuration Procedure; Enabling Eap Relay Or Eap Termination - HP 5500 HI Series Configuration Manual

Configuration procedure

To enable 802.1X on a port:
Step
1. Enter system view.
2. Enable 802.1X globally.
3. Enable 802.1X on a
port.

Enabling EAP relay or EAP termination

When you configure EAP relay or EAP termination, consider the following factors:
The support of the RADIUS server for EAP packets
•
The authentication methods supported by the 802.1X client and the RADIUS server
•
If the client is using only MD5-Challenge EAP authentication or the "username + password" EAP
authentication initiated by an HP iNode 802.1X client, you can use both EAP termination and EAP relay.
To use EAP-TL, PEAP, or any other EAP authentication methods, you must use EAP relay. When you make
your decision, see
For more information about EAP relay and EAP termination, see
To configure EAP relay or EAP termination:
Step
1. Enter system view.
2. Configure EAP relay or
EAP termination.
NOTE:
If EAP relay mode is used, the user-name-format command configured in RADIUS scheme view does not
take effect. The access device sends the authentication data from the client to the server without any
modification.
Command
system-view
dot1x
•
In system view:
dot1x interface interface-list
•
In Ethernet interface view:
a. interface interface-type
interface-number
b. dot1x
"A comparison of EAP relay and EAP
Command
system-view
dot1x authentication-method
{ chap | eap | pap }
termination" for help.
"802.1X authentication
Remarks
N/A
Optional.
By default, the network access device
performs EAP termination and uses CHAP to
communicate with the RADIUS server.
Specify the eap keyword to enable EAP
termination.
Specify the chap or pap keyword to enable
CHAP-enabled or PAP-enabled EAP relay.
79
Remarks
N/A
By default, 802.1X is
disabled globally.
Use either method.
By default, 802.1X is
disabled on a port.
procedures."