Creating Custom Expect Scripts - HP ProCurve NAC 800 User Manual

uthentication-period 3600 re-authenticate quiet-interval 60
transmit-interval 3
0 supplicant-timeout 30 server-timeout 30 max-request 2
Vlan Info:
vlan create 10 name "production" type port
vlan create 11 name "guest" type port
vlan create 12 name "quarantine" type port
! *** EAP ***
!
eapol enable
interface FastEthernet ALL
eapol port 1-2 status auto traffic-control in-out re-
authentication enable re-authentication-period 3600 re-
authenticate quiet-interval 60 transmit-interval 3 0 supplicant-
timeout 30 server-timeout 30 max-request 2
! *** Port Mirroring ***
!
port-mirroring mode XrxOrXtx monitor-port 9 mirror-port-X 12
!

Creating Custom Expect Scripts

Expect is a tool that uses simple scripts to automate interactive applications.
NAC 800 utilizes expect scripts when communicating with 802.1X devices. You can
add 802.1X devices in the NAC 800 user interface (Home>>System configura-
tion>>Quarantining menu option>>Add 802.1X device). There are 11 pre-defined devices,
and one generic device. You can use the default expect script values, modify them,
or enter new values. The expect scripts used are as follows:
Initialization script – This script is used to log in to the device, enter enable
■
mode and set up the state necessary to execute the re-authentication
command. It is executed the first time a connection to the device is opened
or if the connection to the device is reset.
■ Re-authentication script – This script is used to perform endpoint re-
authentication. It is executed once for each endpoint re-authentication
while the connection to the device remains active (until the connection goes
bad or the idle time inactivity timeout is reached).
Exit script – This script is used to exit the console. It is executed when the
■
idle time timeout is reached.
802.1X Quarantine Method
Setting up the 802.1X Components
11-57