User Manual

16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports
Manage Device Security User Manual282
If you do not know the IP address of the switch, see Access the switch on-network and
connected to the Internet on page 17 or Access the switch off-network and not
connected to the Internet on page 25.
The Device UI login page displays.
If you did not yet activate your warranty, the Register to activate your warranty page
displays. For more information, see
Register the switch on page 28.
4. Enter one of the following passwords:
• Enter your device admin password.
• If you previously managed the switch through the Insight app or Cloud portal, enter
the Insight network password for the last Insight network locat
ion.
For information about the credentials, see
Credentials for the device UI on page 26.
5. Click the Go
button.
The System Information page displays.
6. Select Security > Port
Authentication > Basic > 802.1X Configuration.
7. Configure the following port authentication settings:
• Port Based Authentication State. This selection
specifies the 802.1X administrative
mode on the switch. The default value is Disable.
- Enabled. If 802.1X is enabled, authentication is performed by a RADIUS server.
This means that the primary authentication method must be RADIUS.
To set the
method, select Security > Management Security > Authentication List and
select RADIUS as method 1 for defaultList. For more information, see
Configure
authentication lists on page 260.
- Disabled. When port-based authentication is globally disabled, the switch does
not check for
802.1X authentication before allowing traffic on any ports, even if the
ports are configured to allow only authenticated users.
• VLAN Assignment Mode. This selection
specifies whether a port can be placed in a
particular VLAN. The default value is Disable.
When enabled, this feature allows a port to be placed into a particular VLAN based on
the result of the authentication or type of 802.1X authentication a client uses when it
accesses the device. The authentication server can provide information to the device
about which VLAN to assign the supplicant.
• Dynamic VLAN Creation Mode. This selection specifies whether a VLAN can be
dynamically created on the switch. The default value is Disable
.