User Manual

Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power
Manage Switch Security User Manual299
4. Enter one of the following passwords:
• After registration, enter your customized local device password.
• If you previously added the switch to an Insight network location, enter the Insight
network password.
For more information about the local device password and the Insight network password,
see
Credentials for the local browser UI on page 28.
5. Click the Login button.
The System Information page displays.
6. Select Security > Port Authentication > Advanced > Port Authentication.
The Port Authentication page displays.
7. To view more fields, move the horizontal bar at the bottom of the page to the right.
8. Select one or more interfaces by taking one of the following actions:
• To configure a single interface, select the check box associated with the port, or type
the port number in the Go To Interface field and click the Go button.
• To configure multiple interfaces with the same settings, select the check box
associated with each interface.
• To configure all interfaces with the same settings, select the check box in the table
header.
9. Specify the following settings:
• Port Control. Defines the port authorization state. The control mode is set only if the
link status of the port is link up. Select one of the following options:
- Auto. The switch automatically detects the mode of the interface.
- Authorized. The switch places the interface into an authorized state without
being authenticated. The interface sends and receives normal traffic without client
port-based authentication.
- Unauthorized. The switch denies the selected interface access by moving the
interface into unauthorized state. The switch cannot provide authentication
services to the client through the interface.
- MAC based. Multiple supplicants connected to the same port are allowed to be
authenticated individually. Each host connected to the port must de authenticated
separately to gain access to the network. The hosts are distinguished by their
MAC addresses.
• MAB. Specify whether to enable or disable MAC-based Authentication Bypass (MAB)
for 802.1x-unaware clients at the specified port. MAB only functions if the port control
mode is MAC-based. By default, MAB is disabled.
• Guest VLAN ID. Specify the VLAN ID for the guest VLAN. The valid range is 0–4093.
The default value is 0. Enter 0 to reset the guest VLAN ID on the interface. The guest
VLAN allows the port to provide a distinguished service to unauthenticated users.
This feature provides a mechanism to allow users access to hosts on the guest
VLAN.