TP-Link T2500G-10MPS, Руководство пользователя

Страница: 662 / 804

Configuration Guide 638
Configuring Network Security Configuration Examples
Switch_A#show ip arp inspection interface
Port OverSpeed Rate Current Status LAG
Gi1/0/1 Enabled 15 N/A Normal N/A
Gi1/0/2 Enabled 15 N/A Normal N/A
Gi1/0/3 Enabled 15 N/A Normal N/A
Gi1/0/4 Disabled 15 N/A N/A N/A
......
9.2 Example for 802.1X
9.2.1 Network Requirements
The network administrator wants to control access from the end users (clients) in the
company. It is required that all clients need to be authenticated separately and that only the
authenticated clients can access the Internet.
9.2.2 Configuration Scheme

To authenticate clients separately, enable 802.1X authentication, configure the control
mode as auto, and set the control type as MAC based.

Enable 802.1X authentication on the ports connected to clients.

Keep 802.1X authentication disabled on ports connected to the authentication server
and the Internet, which ensures unrestricted connections between the switch and the
authentication server or the Internet.
9.2.3 Network Topology
As shown in the following figure, Switch A acts as the authenticator. Port 1/0/1 is
connected to the client, port 1/0/2 is connected to the RADIUS server, and port 1/0/3 is
connected to the Internet.