Netgear M5300-28G-POE+ (GSM7228PSv1h2) - 12-Port Managed Gigabit Switch Softwarehandbuch

for the credentials to be checked, which will determine the authorization state of the Port. The 

Authenticator PAE controls the authorized/unauthorized state of the controlled Port 

depending on the outcome of the RADIUS-based authentication process.

This example shows how to configure the switch so that 802.1X-based authentication is 
required on the ports in a corporate conference room (1/0/5– 1/0/8). These ports are 
available to visitors and must be authenticated before granting access to the network. The 
authentication is handled by an external RADIUS server. When the visitor is successfully 
authenticated, traffic is automatically assigned to the guest VLAN. This example assumes 
that a VLAN has been configured with a VLAN ID of 150 and VLAN Name of Guest.

From the Port Authentication screen, select ports 1/0/5, 1/0/6, 1/0/7 and 1/0/8.

From the Port Control menu, select Unauthorized.

The Port Control setting for all other ports where authentication is not needed should be 

Authorized. When the Port Control setting is Authorized, the port is unconditionally put in 

a force-Authorized state and does not require any authentication. When the Port Control 
setting is Auto, the authenticator PAE sets the controlled port mode

In the Guest VLAN field for ports 1/0/5– 1/0/8, enter 150 to assign these ports to the guest 

VLAN.

You can configure additional settings to control access to the network through the ports. 
See 

Click the Apply button.

From the 802.1X Configuration screen, set the Port Based Authentication State and Guest 

VLAN mode to Enable, and then the Apply button (See 

597).

This example uses the default values for the port authentication settings, but there are 
several additional settings that you can configure. For example, the EAPOL Flood Mode