Switches, Hubs, and Modems
cancel
Showing results for 
Search instead for 
Did you mean: 

802.1x and windows users

Hp 5300 Went Down
Occasional Advisor

802.1x and windows users

Hi,
we have a problem using 802.1x on wired network.
If i connect my pc to the network with user "example" the switch authenticate and put me on the correct VLAN.
If i disconnect the user and login with a different user, the pc remain in the "example" vlan.
There is a way to force re-authentication when the windows user change?

THANK YOU
6 REPLIES
Mohieddin Kharnoub
Honored Contributor

Re: 802.1x and windows users

Hi

The command for re-auth is:
aaa port-access authenticator < port-list >
[reauthenticate]

Forces reauth en tic at ion (unless the authenticator is in â HELDâ state)

But i would like to ask, who is assigning Vlan, the switch static Vlan, Switch auth-VID, RADIUS attrib, or IDM?

If you can attach the config of your 5300 that would be very helpful to understand the situation.

Make sure anyway your configuration is correct, and use the following document for 802.1x on the 5300:

ftp://ftp.hp.com/pub/networking/software/6400-5300-4200-3400-Security-Oct2006-59906052-Chap11.pdf

Good Luck !!!
Science for Everyone
Hp 5300 Went Down
Occasional Advisor

Re: 802.1x and windows users

We use RADIUS attribute via Microsoft IAS (w2003).
We already try with re-auth forced by the switch and it works.
There is way to perform re-auth when the windows user change using the Win client?
Mohieddin Kharnoub
Honored Contributor

Re: 802.1x and windows users

can you attach the config of the 5300 after removing any sensitive information.

Science for Everyone
Matt Hobbs
Honored Contributor

Re: 802.1x and windows users

There are a couple of registry changes you need to make on the client machines:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1119130
Hp 5300 Went Down
Occasional Advisor

Re: 802.1x and windows users

Hi,
the 2 registry keys are not present in my registry...
I have to manually put these 2 keys?
Matt Hobbs
Honored Contributor

Re: 802.1x and windows users

I've attached a file you can use that will insert those entries into your registry. As it does have to do with modifying your registry, please take any precautions you need to (i.e, make a backup first just in case).

Having said that, I've never had a problem with these keys.