Specifying Supported Domain Name Delimiters; Displaying And Maintaining 802.1X; 802.1X Configuration Examples; 802.1X Authentication Configuration Example - HP A5830 Series Configuration Manual

Specifying supported domain name delimiters

By default, the access device supports the at sign (@) as the delimiter. You can also configure the access
device to accommodate 802.1X users who use other domain name delimiters.
The configurable delimiters include the at sign (@), back slash (\), and forward slash (/).
If an 802.1X username string contains multiple configured delimiters, the leftmost delimiter is the domain
name delimiter. For example, if you configure @, /, and \ as delimiters, the domain name delimiter for
the username string 123/22\@abc is the forward slash (/).
If a username string contains none of the delimiters, the access device authenticates the user in the
mandatory or default ISP domain. The access selects a domain delimiter from the delimiter set in this
order: @, /, and \.
To specify a set of domain name delimiters:
To do...
1. Enter system view.
2. Specify a set of domain name
delimiters for 802.1X users.
If you configure the access device to include the domain name in the username sent to the RADIUS
server, make sure that the domain delimiter in the username can be recognized by the RADIUS server.
For username format configuration, see the user-name-format command in Security Command
Reference.

Displaying and maintaining 802.1X

To do...
Display 802.1X session
information, statistics, or
configuration information of
specified or all ports
Clear 802.1X statistics

802.1X configuration examples

802.1X authentication configuration example

Network requirements
As shown in
GigabitEthernet 1/0/1. Implement MAC-based access control on the port so the logoff of one user does
not affect other online 802.1X users.
Use the command...
system-view
dot1x domain-delimiter string
Use the command...
display dot1x [ sessions | statistics ] [
interface interface-list ] [ | { begin | exclude
| include } regular-expression ]
reset dot1x statistics [ interface interface-list
]
Figure 33, the access device performs 802.1X authentication for users who connect to port
Remarks
—
Optional.
By default, only the at sign (@)
delimiter is supported.
83
Remarks
Available in any view
Available in user view