topic Re: 802.1x and windows users in Switches, Hubs, and Modems

802.1x and windows users

Hp 5300 Went Down — Mon, 22 Oct 2007 07:07:21 GMT

Hi,
we have a problem using 802.1x on wired network.
If i connect my pc to the network with user "example" the switch authenticate and put me on the correct VLAN.
If i disconnect the user and login with a different user, the pc remain in the "example" vlan.
There is a way to force re-authentication when the windows user change?

THANK YOU

Re: 802.1x and windows users

Mohieddin Kharnoub — Mon, 22 Oct 2007 10:21:04 GMT

Hi

The command for re-auth is:
aaa port-access authenticator < port-list >
[reauthenticate]

Forces reauth en tic at ion (unless the authenticator is in â HELDâ state)

But i would like to ask, who is assigning Vlan, the switch static Vlan, Switch auth-VID, RADIUS attrib, or IDM?

If you can attach the config of your 5300 that would be very helpful to understand the situation.

Make sure anyway your configuration is correct, and use the following document for 802.1x on the 5300:

ftp://ftp.hp.com/pub/networking/software/6400-5300-4200-3400-Security-Oct2006-59906052-Chap11.pdf

Good Luck !!!

Re: 802.1x and windows users

Hp 5300 Went Down — Mon, 22 Oct 2007 10:34:01 GMT

We use RADIUS attribute via Microsoft IAS (w2003).
We already try with re-auth forced by the switch and it works.
There is way to perform re-auth when the windows user change using the Win client?

Re: 802.1x and windows users

Mohieddin Kharnoub — Mon, 22 Oct 2007 10:36:59 GMT

can you attach the config of the 5300 after removing any sensitive information.

Re: 802.1x and windows users

Matt Hobbs — Mon, 22 Oct 2007 17:38:00 GMT

There are a couple of registry changes you need to make on the client machines:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1119130

Re: 802.1x and windows users

Hp 5300 Went Down — Tue, 23 Oct 2007 02:19:07 GMT

Hi,
the 2 registry keys are not present in my registry...
I have to manually put these 2 keys?

Re: 802.1x and windows users

Matt Hobbs — Tue, 23 Oct 2007 17:44:23 GMT

I've attached a file you can use that will insert those entries into your registry. As it does have to do with modifying your registry, please take any precautions you need to (i.e, make a backup first just in case).

Having said that, I've never had a problem with these keys.