QTech QSW-2800 series, Руководство по настройке

Страница: 306 / 415

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
292
resources.
The user authentication port belongs to a default VLAN (Guest VLAN) before passing the
802.1x authentication, with the right to access the resources within this VLAN without
authentication. But the resources in other networks are beyond reach. Once authenticated, the
port will leave Guest VLAN, and the user can access the resources of other networks.
In Guest VLAN, users can get 802.1x supplicant system software, update supplicant system or
update some other applications (such as anti-virus software, the patches of operating system).
The access device will add the port into Guest VLAN if there is no supplicant getting
authenticated successfully in a certain stretch of time because of lacking exclusive
authentication supplicant system or the version of the supplicant system being too low.
Once the 802.1x feature is enabled and the Guest VLAN is configured properly, a port will be
added into Guest VLAN, just like Auto VLAN, if there is no response message from the
supplicant system after the device sends more authentication-triggering messages than the
upper limit (EAP-Request/Identity) from the port.
The authentication server assigns an Auto VLAN, and then the port leaves Guest VLAN and
joins the assigned Auto VLAN. When the user becomes offline, the port will be allocated to the
specified Guest VLAN again.
The authentication server assigns an Auto VLAN, and then the port leaves Guest VLAN and
joins the specified VLAN. When the user becomes offline, the port will be allocated to the
specified Guest VLAN again.
38.2 802.1x Configuration Task List
802.1x Configuration Task List:
1. Enable IEEE 802.1x function
2. Access management unit property configuration
1) Configure port authentication status
2) Configure access management method for the port: MAC-based or port-based
3) Configure expanded 802.1x function
4) Configure IPv6 passthrough function of the port
3. User access devices related property configuration (optional)
1. Enable 802.1x function
Command Explanation
Global Mode
dot1x enable
no dot1x enable
Enables the 802.1x function in the switch and ports; the no
command disables the 802.1x function.
dot1x privateclient
enable
Enables the switch force client software using private 802.1x
authentication packet format. The no command will disable this