ZyXEL Communications GS1900 Series, Руководство пользователя

Страница: 133 / 263

Chapter 20 Configuration: VLAN
GS1900 Series User’s Guide
133
20.3 G ue st VLAN
When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the
correct credentials are blocked from using the ports. You can configure your Switch to have one VLAN
that acts as a guest VLAN. If you enable the guest VLAN (102 in the example) on a port (2 in the
example), the user (A in the example) that is not IEEE 802.1x capable or fails to enter the correct
username and password can still access the port, but traffic from the user is forwarded to the guest
VLAN. That is, unauthenticated users can have access to limited network resources in the same guest
VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the network
administrator configures switches or routers with the guest network feature.
Fig ure 130
Guest VLAN Example
Use this screen to view and configure guest VLAN settings.
20.3.1 The G lo b a l Sc re e n
Use this screen to configure the global Guest VLAN settings. Click
C o nfig ura tio n
>
VLAN
>
G ue st VLAN
>
G lo b a l
to open this screen.
Membership Select
Fo rb idde n
if you want to prohibit the port from joining this VLAN group.
Select
Exc lude d
to remove the port from the VLAN.
Select
Ta g g e d
to set the port TX tag status to tagged in the VLAN.
Select
Unta g g e d
to set the port TX tag status to untagged in the VLAN.
Apply Click
Apply
to save the changes.
Cancel Click
C a nc e l
to discard the changes.
Table 77 Configuration > VLAN > VLAN > VLAN Port (continued)
LABEL DESC RIPTIO N