NETGEAR GS716T - ProSafe Switch, Руководство по администрированию программного обеспечения

Страница: 194 / 303

194
GS716T and GS724T Gigabit Smart Switches
802.1X Configuration
Use the 802.1X Configuration page to enable or disable port access control on the system.
To display the 802.1X Configuration page, click Security

Port Authentication

Basic

802.1X Configuration .
To configure global 802.1X settings:
1. Select the appropriate radio button in the Port Based Authentication State field to
enable or disable 802.1X administrative mode on the switch.
• Enable . Port-based authentication is permitted on the switch.
Note: If 802.1X is enabled, authentication is performed by a RADIUS
server. This means the primary authentication method must be
RADIUS. To set the method, go to
Security

Management
Security

Authentication List and select RADIUS as method 1 for
defaultList. For more information, see Authentication List
Configuration on page 184.
• Disable . The switch does not check for 802.1X authentication before allowing traffic
on any ports, even if the ports are configured to allow only authenticated users.
2. Enable or disable the Guest VLAN supplicant mode.
• Enabled . When no 802.1X supplicant is authenticated on a port, the port still provides
limited network access, as determined by a guest VLAN configured on the
authentication server.
• Disabled . A guest VLAN cannot be used for unauthorized ports.
3. Enable or disable the VLAN Assignment mode:
• Enable . Allow a RADIUS server to assign the VLAN ID to authenticated supplicants.
• Disable . The RADIUS server can not assign authenticated clients to VLANs.
4. Click Cancel to cancel the configuration on the screen and reset the data on the screen to
the latest value of the switch.
5. If you change the settings, click Apply to apply the new settings to the system.