forked from Karlo-Hosting/Docs
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
4 changed files
with
164 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,137 @@ | ||
# Aruba HP Switch | ||
|
||
[Source article (German)](https://sysadms.de/2018/10/16/aruba-switches-fuer-802-1x-authentifizierung-konfigurieren/) | ||
|
||
## Radius - 802.1X | ||
|
||
### Current Radius configuration | ||
|
||
`show radius` | ||
|
||
### Server Setup | ||
|
||
<!-- tabs:start --> | ||
|
||
#### **Add Server** | ||
|
||
1. Enter configuration mode | ||
|
||
`config` | ||
|
||
1. Add the new Radius server | ||
|
||
`radius-server host SERVERIP key PASSWORD` | ||
|
||
1. Optionally, set the radius timeout and retransmit values | ||
|
||
`radius-server timeout 5` | ||
|
||
`radius-server retransmit 3` | ||
|
||
1. Exit configuration mode | ||
|
||
`end` | ||
|
||
1. Save the configuration | ||
|
||
`wr mem` | ||
|
||
#### **Remove Server** | ||
|
||
1. Enter configuration mode | ||
|
||
`config` | ||
|
||
1. Remove the old Radius server configuration | ||
|
||
`no radius-server host SERVERIP` | ||
|
||
1. Exit configuration mode | ||
|
||
`end` | ||
|
||
1. Save the configuration | ||
|
||
`wr mem` | ||
|
||
#### Enable 802.1X Globally | ||
|
||
1. Enter configuration mode | ||
|
||
`configure terminal` | ||
|
||
1. Enable 802.1X globally | ||
|
||
`aaa port-access authenticator active` | ||
|
||
1. Exit configuration mode | ||
|
||
`end` | ||
|
||
1. Save the configuration | ||
|
||
`write memory` | ||
|
||
<!-- tabs:end --> | ||
|
||
### Port Setup | ||
|
||
<!-- tabs:start --> | ||
|
||
#### **Add Port** | ||
|
||
1. Enter configuration mode | ||
|
||
`config` | ||
|
||
1. Enter interface configuration mode for the specific port - optional; never used myself | ||
|
||
`interface 1/1/1` | ||
|
||
1. Enable 802.1X authentication on the port | ||
|
||
`aaa port-access authenticator PORTNUMBER` | ||
|
||
1. Configure Guest VLAN | ||
|
||
`aaa port-access authenticator PORTNUMBER unauth-vid VID` | ||
|
||
1. Configure VLAN if not provided via Radius | ||
|
||
`aaa port-access authenticator PORTNUMBER auth-vid VID` | ||
|
||
1. Set the port to controlled-direction in - optional; never used myself | ||
|
||
`aaa port-access authenticator controlled-direction in` | ||
|
||
1. Exit interface configuration mode - only needed if the "interfce" command has ran | ||
|
||
`exit` | ||
|
||
1. Exit configuration mode | ||
|
||
`end` | ||
|
||
1. Save the configuration | ||
|
||
`wr mem` | ||
|
||
#### **Remove Port** | ||
|
||
1. Enter configuration mode | ||
|
||
`config` | ||
|
||
1. disable 802.1X authentication on the port | ||
|
||
`no aaa port-access authenticator PORTNUMBER` | ||
|
||
1. Exit configuration mode | ||
|
||
`end` | ||
|
||
1. Save the configuration | ||
|
||
`wr mem` | ||
|
||
<!-- tabs:end --> |
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,22 @@ | ||
# Networking | ||
|
||
<!-- panels:start --> | ||
<!-- div:title-panel --> | ||
## Radius | ||
|
||
<!-- div:left-panel --> | ||
### Missing Radius Auth Settings | ||
|
||
This could be because the service "dot3avc" is not running. | ||
|
||
> [!Note] | ||
> The service display name can be quite exotic in different languages. Make sure to use the "services.msc" instead of the one embedded in the Task manager, as the ladder uses the display name, making it impossible to find. | ||
### Disable Network Radius | ||
|
||
To stop authentication via cable, this service can be stopped. This is sometimes needed, if the computer is in a foreign network and tries to authenticate. | ||
|
||
<!-- div:right-panel --> | ||
![dot3avc service properties in German](_media-networking/dot3avc-service.png) | ||
|
||
<!-- panels:end --> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters