802.1X Example Configuration - NETGEAR GS108T-200NAS Software Administration Manual

GS108T and GS110TP Smart Switch Software Administration Manual
Supplicant
Supplicant
Figure B-2

802.1X Example Configuration

This example shows how to configure the switch so that 802.1X-based authentication is required
on the ports in a corporate conference room (g5–g8). These ports are available to visitors and need
to be authenticated before granting access to the network. The authentication is handled by an
external RADIUS server. When the visitor is successfully authenticated, traffic is automatically
assigned to the guest VLAN. This example assumes that a VLAN has been configured with a
VLAN ID of 150 and VLAN Name of Guest.
1. From the Port Authentication screen, select ports g5, g6, g7, and g8.
2. From the Port Control menu, select Unauthorized.
The Port Control setting for all other ports where authentication is not needed should
Authorized. When the Port Control setting is Authorized, the port is unconditionally put in a
force-Authorized state and does not require any authentication. When the Port Control setting
is Auto, the authenticator PAE sets the controlled port mode
3. In the Guest VLAN field for ports g5–g8, enter 150 to assign these ports to the guest VLAN.
You can configure additional settings to control access to the network through the ports. See
"Port Security Interface Configuration" on page 5-38
4. Click Apply.
5. From the 802.1X Configuration screen, set the Port Based Authentication State and Guest
VLAN Mode to Enable, and then click Apply (See
page 5-37).
B-14
Authenticator
Switch
for information about the settings.
"Port Security Configuration" on
v1.0, April 2010
Authentication
Server (RADIUS)
192.168.10.23
Configuration Examples