Netgear S3300-28X-PoE+ (GS728TXP) - ProSAFE S3300 Smart Switch Series 管理者ガイド

ページ / 346
Managing Device Security 
232
S3300 Smart Switch 
Port Authentication
In port-based authentication mode, when 802.1X is enabled globally and on the port, 
successful authentication of any one supplicant attached to the port results in all users being 
able to use the port without restrictions. At any given time, only one supplicant is allowed to 
attempt authentication on a port in this mode. Ports in this mode are under bidirectional 
control. This is the default authentication mode.
The 802.1X network has three components: 
Authenticators. Specifies the port that is authenticated before permitting system access. 
Supplicants. Specifies the host connected to the authenticated port requesting access to 
the system services.
Authentication Server. Specifies the external server, for example, the RADIUS server 
that performs the authentication on behalf of the authenticator, and indicates whether the 
user is authorized to access system services. 
The Port Authentication menu contains links to the features described in the following 
sections.
802.1X Configuration
Use the 802.1X Configuration screen to configure global port access control settings on the 
switch. The switch software supports.
To globally enable all 802.1X features:
1. 
Select Security 
 Port Authentication 
 Basic 
 802.1X Configuration.
2. 
Next to Port Based Authentication State, select Enable.
Note:
If 802.1X is enabled, authentication is performed by a RADIUS server. 
This means the primary authentication method must be RADIUS. To 
set the method, select Security 
 Management Security 
 
Authentication List and select RADIUS as method 1 for defaultList. 
223.
When port-based authentication is globally disabled, the switch does not check for 
802.1X authentication before allowing traffic on any ports, even if the ports are configured 
to allow only authenticated users.