NETGEAR S3300-28X (GS728TX) 24x1GE - Инструкция по эксплуатации - Страница 349

 Configuration Examples

349

 S3300 Smart Managed Pro Switch

The Port Control setting for all other ports where authentication is not needed should 
Authorized. When the Port Control setting is Authorized, the port is unconditionally put in 
a force-Authorized state and does not require any authentication. When the Port Control 
setting is Auto, the authenticator PAE sets the controlled port mode.

3. 

In the Guest VLAN field for ports g1–g8, enter 150 to assign these ports to the guest VLAN.

You can configure additional settings to control access to the network through the ports. 
See 

Port Security Interface Configuration 

on page 267 for information about the settings.

4. 

Click the 

Apply

 button.

5. 

From the 802.1X Configuration screen, set the Port Based Authentication State and Guest 
VLAN Mode to Enable.

For more information about this step, see 

Port Security Configuration 

on page 267.

6. 

Click the 

Apply

 button

.

This example uses the default values for the port authentication settings, but there are 
several additional settings that you can configure. For example, the EAPOL Flood Mode 
field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on 
the device. 

7. 

From the RADIUS Server Configuration screen, configure a RADIUS server with the 
following settings:

•

Server Address

. 192.168.10.23

•

Secret Configured

. Yes

•

Secret

. secret123

•

Active

. Primary

For more information about this step, see 

RADIUS Configuration 

on page 243.

8. 

Click the 

Add

 button.

9. 

From the Authentication List screen, configure the default List to use RADIUS as the first 
authentication method.

For more information about this step, see 

Authentication List Configuration 

on page 249. 

This example enables 802.1X-based port security on the switch and prompts the hosts 
connected on ports g1–g8 for an 802.1X-based authentication. The switch passes the 
authentication information to the configured RADIUS server.

MSTP

Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge 
loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning 
Tree Protocol (MSTP) supports multiple instances of Spanning Tree to efficiently channel 
VLAN traffic over different interfaces. Each instance of the Spanning Tree behaves in the 
manner specified in IEEE 802.1w, Rapid Spanning Tree, with slight modifications in the 
working but not the end effect (chief among the effects is the rapid transitioning of the port to 
the Forwarding state).