HP ProCurve Wireless Access Point 420 - Hewlett Packard

802.1x Port Authentication
Command Line Reference
802.1x Port Authentication
The access point supports IEEE 802.1x (802.1x) access control for wireless
clients. This control feature prevents unauthorized access to the network by
requiring an 802.1x client application to submit user credentials for authentication.
Client authentication is then verified by a RADIUS server using EAP
(Extensible Authentication Protocol) before the access point grants client
access to the network. The 802.1x EAP packets are also used to pass dynamic
unicast session keys and static broadcast keys to wireless clients.
Command Function Mode Page
802.1x Configures 802.1x as disabled, supported, or required GC 6-40
802.1x broadcast- Sets the interval at which the primary broadcast keys GC 6-41
key-refresh-rate are refreshed for stations using 802.1x dynamic keying
802.1x session- Sets the interval at which unicast session keys are GC 6-41
key-refresh-rate refreshed for associated stations using dynamic keying
802.1x session- Sets the timeout after which a connected client must GC 6-42
timeout be re-authenticated
address filter Sets filtering to allow or deny listed addresses GC 6-43
default
address filter entry Enters a MAC address in the filter table GC 6-43
address filter Removes a MAC address from the filter table GC 6-44
delete
mac- Sets address filtering to be performed with local or GC 6-45
authentication remote options
server
mac- Sets the interval at which associated clients will be re- GC 6-45
authentication authenticated with the RADIUS server authentication
session-timeout database
show Shows all 802.1x authentication settings, as well as the Exec 6-46
authentication address filter table
6-39