- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- Can´t get Web authentication on HP Procurve 6200yl...
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2008 02:18 AM
09-24-2008 02:18 AM
Can´t get Web authentication on HP Procurve 6200yl working
I just got some new HP 6200yl (firmware 13.25) swtiches. I followed the steps (at least I thought so) to setup Web Authentication with RADIUS-Server an PEAP+MS-CHAPv2.
My problem is, that when I connect the test computer to the appropriate port, it doesn´t get the "public" IP address from the switch and therefore I can´t login on the web login page.
show port-security... says that that web authentication is enabled, but it simply doesn´t work.
I am just asking myself whether I forgot something to configure?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2008 04:21 AM
09-24-2008 04:21 AM
Re: Can´t get Web authentication on HP Procurve 6200yl working
also, what "brand" of radius server are you running?
----------
here are minimal commands needed on the switch to make 802.1X auth work:
--
radius-server host 10.1.1.202
aaa authentication port-access eap-radius
aaa port-access web-based 13
aaa port-access authenticator active
--
the last command is quite often overlooked and is required to make 802.1X auth work...and if its not there, the result is basically what you are seeing...
hth...jeff
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2008 04:31 AM
09-24-2008 04:31 AM
Re: Can´t get Web authentication on HP Procurve 6200yl working
it´s a Windows 2003 Server with IAS/RADIUS on.
This is already working for weeks with Wireless LAN and 802.1X.
I´ll reset the switch and try it again with your instructions. Let´s see whether it will work then
thanks in advance
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2008 05:42 AM
09-24-2008 05:42 AM
Re: Can´t get Web authentication on HP Procurve 6200yl working
also2, the web-auth userid needs to have its password set for reverse encryption, so if you've already set the pw, you need to set the option for reverse encryption and then reset the password so it now stores it in reverse encrypted form...
finally, if you look at the event viewer/system/IAS log entries, this provides the best information for 802.1X operations troubleshooting...
hth...jeff
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2008 09:08 PM
09-24-2008 09:08 PM
Re: Can´t get Web authentication on HP Procurve 6200yl working
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-24-2008 10:20 PM
09-24-2008 10:20 PM
Re: Can´t get Web authentication on HP Procurve 6200yl working
i was operating in the "old days mode", reversible encryption is not needed in K.13.xx code for web-auth/mac-auth...
it is needed for switch management authentication and for PEAP-MD5...
good catch matt :-)
cheers...jeff
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-26-2008 12:04 AM
09-26-2008 12:04 AM
Re: Can´t get Web authentication on HP Procurve 6200yl working
tried it again, but it doesn´t work. I don´t get an IP via the inbuilt dhcp service of the switch.
ProCurve Switch 6200yl-24G(config)# show run
Running configuration:
; J8992A Configuration Editor; Created on release #K.13.25
hostname "ProCurve Switch 6200yl-24G"
module 1 type J8992A
ip default-gateway 132.45.23.240
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged 1-24
ip address 132.45.23205 255.255.254.0
ip igmp
exit
qos type-of-service diff-services
aaa authentication port-access eap-radius
aaa authentication web-based peap-mschapv2
radius-server key 12345678
radius-server host 132.45.29.33 key '12345678'
no ip ssh
aaa port-access authenticator 24
aaa port-access authenticator 24 client-limit 32
aaa port-access authenticator active
aaa port-access web-based 20,23-24
aaa port-access web-based dhcp-addr 192.168.0.0 255.255.255.0
spanning-tree
password manager
password operator
ProCurve Switch 6200yl-24G(config
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-26-2008 08:04 AM
09-26-2008 08:04 AM
Re: Can´t get Web authentication on HP Procurve 6200yl working
dumb question from me, the device connecting to one of the web-auth ports is set to dhcp an address - yes?
also, when you do a 'sh port-a web' the web-auth ports should be in closed state...
not sure what the deal is now...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-29-2008 12:08 AM
09-29-2008 12:08 AM
Re: Can´t get Web authentication on HP Procurve 6200yl working
of course DHCP is enabled...
Has anyone another idea, what the problem could be?