802.1x configuration on HP 8212zl

[hmehmood]

Hi Experts,

I am Juniper Consultant working on an 802.1x implementation for a customer with HP Procure 8212zl. I am struggling for HP configuration for 802.1x when it comes to configuring

            - Authentication Reject Vlan (Server Reject Vlan in Junos language) VLAN that authenticator is supposed to assign in case of authentication reject

            - Fallback VLAN in case radius server is down and not responding

In our case we want to have different vlan assignments in both cases. I would appreciate if somenone can post configuration template for 802.1x authentication which covers:

           - Authentication Reject VLAN

           - Fallback VLAN

Thanks,

Hassan

[EricAtHP]

I am not familiar with the Juniper functionality but based on your statements, I think the best you can do with the 8212 is to use the unauthenticated vlan parameter. I think it combines both of the functions you are looking for into one setting. That said, you only get one choice and not two.

aaa port-access authenticator <PORT#> unath-vid <VLAN-ID>

However, would it be possible to configure your RADIUS server to assign a VLAN id when authentication fails? It could be a workaround.