Planet XGS3-24042 User Manual Page 531

  • Download
  • Add to my manuals
  • Print
  • Page
    / 721
  • Table of contents
  • TROUBLESHOOTING
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 530
52-17
# Set the access control mode on the port as portbased.
Switch(Config-If-Ethernet1/0/2)#dot1x port-method portbased
# Set the access control mode on the port as auto.
Switch(Config-If-Ethernet1/0/2)#dot1x port-control auto
# Set the port’s Guest VLAN as 100.
Switch(Config-If-Ethernet1/0/2)#dot1x guest-vlan 100
Switch(Config-If-Ethernet1/0/2)#exit
Using the command of show running-config or show interface ethernet 1/2, users can check the
configuration of Guest VLAN. When there is no online user, no failed user authentication or no user gets
offline successfully, and more authentication-triggering messages (EAP-Request/Identity) are sent than the
upper limit defined, users can check whether the Guest VLAN configured on the port takes effect with the
command show vlan id 100.
52.3.2 Examples of IPv4 Radius Applications
Figure
52-16 IEEE 802.1x Configuration Example Topology
The PC is connecting to port 1/0/2 of the switch; IEEE 802.1x authentication is enabled on port1/0/2; the
access mode is the default MAC-based authentication. The switch IP address is 10.1.1.2. Any port other than
port 1/0/2 is used to connect to RADIUS authentication server, which has an IP address of 10.1.1.3, and use
the default port 1812 for authentication and port 1813 for accounting. IEEE 802.1x authentication client
software is installed on the PC and is used in IEEE 802.1x authentication.
10.1.1.1
10.1.1.2
Radius Server
10.1.1.3
Page view 530
1 2 ... 526 527 528 529 530 531 532 533 534 535 536 ... 720 721

Comments to this Manuals

No comments