802.1x and windows users

[Hp 5300 Went Down]

Hi,
we have a problem using 802.1x on wired network.
If i connect my pc to the network with user "example" the switch authenticate and put me on the correct VLAN.
If i disconnect the user and login with a different user, the pc remain in the "example" vlan.
There is a way to force re-authentication when the windows user change?

THANK YOU

[Mohieddin Kharnoub]

Hi

The command for re-auth is:
aaa port-access authenticator < port-list >
[reauthenticate]

Forces reauth en tic at ion (unless the authenticator is in â HELDâ state)

But i would like to ask, who is assigning Vlan, the switch static Vlan, Switch auth-VID, RADIUS attrib, or IDM?

If you can attach the config of your 5300 that would be very helpful to understand the situation.

Make sure anyway your configuration is correct, and use the following document for 802.1x on the 5300:

ftp://ftp.hp.com/pub/networking/software/6400-5300-4200-3400-Security-Oct2006-59906052-Chap11.pdf

Good Luck !!!

[Hp 5300 Went Down]

We use RADIUS attribute via Microsoft IAS (w2003).
We already try with re-auth forced by the switch and it works.
There is way to perform re-auth when the windows user change using the Win client?

[Mohieddin Kharnoub]

can you attach the config of the 5300 after removing any sensitive information.

[Matt Hobbs]

There are a couple of registry changes you need to make on the client machines:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1119130

[Hp 5300 Went Down]

Hi,
the 2 registry keys are not present in my registry...
I have to manually put these 2 keys?

[Matt Hobbs]

I've attached a file you can use that will insert those entries into your registry. As it does have to do with modifying your registry, please take any precautions you need to (i.e, make a backup first just in case).

Having said that, I've never had a problem with these keys.