TP-Link T2500G-10MPS, Руководство пользователя

Страница: 631 / 804

Configuration Guide 607
Configuring Network Security 802.1X Configuration
Quiet-period State: Disable
Quiet-period Timer: 10 sec.
Max Retry-times For RADIUS Packet: 3
Supplicant Timeout: 3 sec.
Switch(config)#end
Switch#copy running-config startup-config
6.2.3 Configuring 802.1X on Ports
Follow these steps to configure the port:
Step 1 configure
Enter global configuration mode.
Step 2 interface {fastEthernet
port
| range fastEthernet
port-list
| gigabitEthernet
port
| range
gigabitEthernet
port-list
}
Enter interface configuration mode.
port: Enter the ID of the port to be configured.
Step 3 dot1x
Enable 802.1X authentication for the port.
Step 4 dot1x port-method { mac-based | port-based }
Configure the control type for the port. By default, it is mac-based.
mac-based : All clients connected to the port need to be authenticated.
port-based : If a client connected to the port is authenticated, other clients can access the
LAN without authentication.
Step 5 dot1x guest-vlan
(Optional) Enable guest VLAN on the port.
Note: Before enabling guest VLAN, the control type of the port should be configured as
port-based.
Step 6 dot1x port-control { auto | authorized-force | unauthorized-force }
Configure the control mode for the port. By default, it is auto.
auto : If this option is selected, the port can access the network only when it is authenticated.
authorized-force : If this option is selected, the port can access the network without
authentication.
unauthorized-force : If this option is selected, the port can never be authenticated.