ProSafe 7000 Managed Switch Software Administration Manual, Release 8.0.3
13-14
Security Management
v1.0, June 2010
The following example shows how to authenticate the dot1x users by a RADIUS server. The management
IP address is 10.100.5.33/24. The example is shown as CLI commands and as a Web interface procedure.
CLI: Authenticating dot1x Users by a RADIUS Server
Assign an IP address to 1/0/19 and set force-authorized mode to this port, create a username list dot1xList.
(Netgear Switch) #config
(Netgear Switch) (Config)#ip routing
(Netgear Switch) (Config)#interface 1/0/1
(Netgear Switch) (Interface 1/0/1)#routing
(Netgear Switch) (Interface 1/0/1)#ip address 192.168.1.1 255.255.255.0
(Netgear Switch) (Config)#dot1x system-auth-control
(Netgear Switch) (Config)#interface 1/0/19
(Netgear Switch) (Interface 1/0/19)#routing
(Netgear Switch) (Interface 1/0/19)#ip address 10.100.5.33 255.255.255.0
(Netgear Switch) (Interface 1/0/19)#dot1x port-control force-authorized
Use radius to authenticate the dot1x users.
(Netgear Switch) (Config)#aaa authentication dot1x default radius
Figure
13-12
PC 1
PC 2
Layer 2
Switch
RADIUS
Server