SNR S2940-8G-v2, Configuration Manual

Page: 320 / 420

SNR S2940-8G-v2 Switch Configuration Guide
802.1x Configuration
User
Switch
Internet
Update
Server
Authenticator
Server
E1/3
VLAN10
VLAN2
E1/2
E1/6
VLAN5
Figure 45.14: User Joining Guest VLAN
# Create VLAN100.
Switch(config)#vlan 100
# Enable the global 802.1x function
Switch(config)#dot1x enable
# Enable the 802.1x function on port Ethernet1/0/2
Switch(config)#interface ethernet1/0/2
Switch(Config-If-Ethernet1/0/2)#dot1x enable
# Set the link type of the port as access mode.
Switch(Config-If-Ethernet1/0/2)#switch-port mode access
# Set the access control mode on the port as portbased.
Switch(Config-If-Ethernet1/0/2)#dot1x port-method portbased
# Set the access control mode on the port as auto.
Switch(Config-If-Ethernet1/0/2)#dot1x port-control auto
# Set the port's Guest VLAN as 100.
Switch(Config-If-Ethernet1/0/2)#dot1x guest-vlan 100
Switch(Config-If-Ethernet1/0/2)#exit
Using the command of show running-config or show interface ethernet1/0/2, users can check
the configuration of Guest VLAN. When there is no online user, no failed user authentication or no
user gets offline successfully, and more authentication-triggering messages (EAP-Request/Identity)
320