User Manual - Page 422

For GS724TPP-100NAS.

Loading ...
Loading ...
Loading ...
24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports
Configuration Examples User Manual422
The selection from the Port Control menu for all other ports on which authentication is
not needed must be Authorized. When the selection from the Port Control menu is
Authorized, the port is unconditionally put in a force-authorized state and does not
require any authentication. When the selection from the Port Control menu is Auto, the
authenticator PAE sets the controlled port mode.
3. In
the Guest
VLAN field for ports g5–g8, enter 150 to assign these ports to the guest VLAN.
You can configure additional settings to control access to the network through the ports.
See
Configure a port security interface on page 298 for information about the settings.
4. Click the Apply
button.
5. On the 802.1X Configuration page, set the port based authentication state and guest VLAN
mode
to Enable, and then the Apply button. (See
Configure the global port security
mode on page 297.)
This example uses the default values for the port authentication settings, but you can
configure several additional settings. For example, the EAPOL Flood Mode field allows
you to enable the forwarding of EAPoL frames when 802.1X is disabled on the device.
6. On the RADIUS Server Configuration page, configure a RADIUS server with the following
settings:
•
Server Address. 192.168.10.23
• Secret Configured. Y
es
• Secret. secret123
• Active. Primary
For more information, see
Manage the RADIUS settings on page 243.
7. Click the Add
button.
8. On the Authentication List page, configure the default list to use RADIUS as the first
authentication
method. (See
Configure authentication lists on page 257.)
This example enables 802.1X-based port security on the switch and prompts the hosts
connected on ports g5-g8 for an 802.1X-based authentication. Th
e switch passes the
authentication information to the configured RADIUS server.
Multiple Spanning Tree Protocol
Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge
loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning
Tree Protocol (MSTP) supports multiple instances of spanning tree to efficiently channel
VLAN traffic over different interfaces. Each instance of the spanning tree behaves in the
manner specified in IEEE 802.1w, Rapid Spanning Tree, with slight modifications in the
working but not the end effect (chief among the effects is the rapid transitioning of the port to
the forwarding state).
Loading ...
Loading ...
Loading ...