Netgear M4300-24X24F (XSM4348S) - Stackable Managed Switch with 48x10G including 24x10GBASE-T and 24xSFP+ Layer 3 Manual Do Utilizador
Configuration Examples
690
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual
Figure 1. 802.1X Authentication Roles
802.1X Example Configuration
This example shows how to configure the switch so that 802.1X-based authentication is
required on the ports in a corporate conference room (1/0/5– 1/0/8). These ports are
available to visitors and must be authenticated before granting access to the network. The
authentication is handled by an external RADIUS server. When the visitor is successfully
authenticated, traffic is automatically assigned to the guest VLAN. This example assumes
that a VLAN has been configured with a VLAN ID of 150 and VLAN Name of Guest.
required on the ports in a corporate conference room (1/0/5– 1/0/8). These ports are
available to visitors and must be authenticated before granting access to the network. The
authentication is handled by an external RADIUS server. When the visitor is successfully
authenticated, traffic is automatically assigned to the guest VLAN. This example assumes
that a VLAN has been configured with a VLAN ID of 150 and VLAN Name of Guest.
1.
From the Port Authentication page, select ports 1/0/5, 1/0/6, 1/0/7 and 1/0/8.
2.
From the Port Control menu, select Unauthorized.
The Port Control setting for all other ports where authentication is not needed should be
Authorized. When the Port Control setting is Authorized, the port is unconditionally put in
a force-Authorized state and does not require any authentication. When the Port Control
setting is Auto, the authenticator PAE sets the controlled port mode
setting is Auto, the authenticator PAE sets the controlled port mode
3.
In the Guest VLAN field for ports 1/0/5– 1/0/8, enter 150 to assign these ports to the guest
VLAN.
You can configure additional settings to control access to the network through the ports.
See
See
4.
Click the Apply button.
5.
From the 802.1X Configuration page, set the Port Based Authentication State and Guest
VLAN mode to Enable, and then the Apply button (See
This example uses the default values for the port authentication settings, but there are
several additional settings that you can configure. For example, the EAPOL Flood Mode
field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on
the device.
several additional settings that you can configure. For example, the EAPOL Flood Mode
field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on
the device.