ZyXEL Communications MES3500-24 用户手册
Chapter 18 Port Authentication
MES3500-24/24F User’s Guide
160
18.2.2 Guest VLAN
When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the
correct credentials are blocked from using the port(s). You can configure your Switch to have one
VLAN that acts as a guest VLAN. If you enable the guest VLAN (102 in the example) on a port (2 in
the example), the user (A in the example) that is not IEEE 802.1x capable or fails to enter the
correct username and password can still access the port, but traffic from the user is forwarded to
the guest VLAN. That is, unauthenticated users can have access to limited network resources in the
same guest VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the
network administrator configures switches or routers with the guest network feature.
correct credentials are blocked from using the port(s). You can configure your Switch to have one
VLAN that acts as a guest VLAN. If you enable the guest VLAN (102 in the example) on a port (2 in
the example), the user (A in the example) that is not IEEE 802.1x capable or fails to enter the
correct username and password can still access the port, but traffic from the user is forwarded to
the guest VLAN. That is, unauthenticated users can have access to limited network resources in the
same guest VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the
network administrator configures switches or routers with the guest network feature.
Figure 78
Guest VLAN Example
Reauth
Specify if a subscriber has to periodically re-enter his or her username and password to
stay connected to the port.
stay connected to the port.
Reauth-period
Specify the length of time required to pass before a client has to re-enter his or her
username and password to stay connected to the port.
username and password to stay connected to the port.
Quiet-period
Specify the number of seconds the port remains in the HELD state and rejects further
authentication requests from the connected client after a failed authentication exchange.
authentication requests from the connected client after a failed authentication exchange.
Tx-period
Specify the number of seconds the Switch waits for client’s response before re-sending an
identity request to the client.
identity request to the client.
Supp-Timeout
Specify the number of seconds the Switch waits for client’s response to a challenge request
before sending another request.
before sending another request.
Apply
Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel
to save your changes to the non-volatile memory when you are done configuring.
changes if it is turned off or loses power, so use the Save link on the top navigation panel
to save your changes to the non-volatile memory when you are done configuring.
Cancel
Click Cancel to begin configuring this screen afresh.
Table 43
Advanced Application > Port Authentication > 802.1x (continued)
LABEL
DESCRIPTION
Internet
2
VLAN 100
A
VLAN 102