Hirschmann GREYHOUND GRS1020, Справочное руководство

Страница: 484 / 619

VLANs
11.2 Guest VLAN / Unauthenticated VLAN
144
UM Config GRS
Release 8.0 09/2019
Perform the following steps:

Open the Switching > VLAN > Configuration dialog.

Click the button.
The dialog displays the Create window.

In the VLAN ID field, specify the value 10 .

Click the Ok button.

For the VLAN, specify the name Guest :
Double-click in the Name column and specify the name.

Click the button.
The dialog displays the Create window.

In the VLAN ID field, specify the value 20 .

Click the Ok button.

For the VLAN, specify the name Not authorized :
Double-click in the Name column and specify the name.

Open the Network Security > 802.1X Port Authentication > Global dialog.

To enable the function, select the On radio button in the Operation frame.

To save the changes temporarily, click the button.

Open the Network Security > 802.1X Port Authentication > Port Configuration dialog.

Specify the following settings for port 1/4 :
– The value auto in the Port control column
– The value 10 in the Guest VLAN ID column
– The value 20 in the Unauthenticated VLAN ID column

To save the changes temporarily, click the button.
enable
Change to the Privileged EXEC mode.
vlan database
Change to the VLAN configuration mode.
vlan add 10
Creates VLAN
10
.
vlan add 20
Creates VLAN
20
.
name 10 Guest
Renames VLAN
10
to
Guest
.
name 20 Unauth
Renames VLAN
20
to
Unauth
.
exit
Change to the Privileged EXEC mode.
configure
Change to the Configuration mode.
dot1x system-auth-control enable
Enable the 802.1X Port Authentication function
globally.
dot1x port-control auto
Enables port control on port
1/4
.
interface 1/4
Change to the interface configuration mode of
interface
1/4
.
dot1x guest-vlan 10
Assign the guest vlan to port
1/4
.
dot1x unauthenticated-vlan 20
Assign the unauthorized vlan to port
1/4
.
exit
Change to the Configuration mode.