User Guide

Configuration Examples
275
GS716Tv3, GS724Tv4, and GS748Tv5 Smart Switches
This example shows how to configure the switch so that 802.1X-based authentication is
required on the ports in a corporate conference room (g1–g8). These ports are available to
visitors and need to be authenticated before granting access to the network. The
authentication is handled by an external RADIUS server. When the visitor is successfully
authenticated, traffic is automatically assigned to the guest VLAN. This example assumes
that a VLAN has been configured with a VLAN ID of 150 and VLAN Name of Guest.
1. From the Port Authentication screen, select ports g1 through g8.
2. From the Port Control list, select Unauthorized.
The Port Control setting for all other ports where authentication is not needed should
Authorized. When the Port Control setting is Authorized, the port is unconditionally put in
a force-Authorized state and does not require any authentication. When the Port Control
setting is Auto, the authenticator PAE sets the controlled port mode.
3. In the Guest VLAN field for ports g1–g8, enter 150 to assign these ports to the guest VLAN.
You can configure additional settings to control access to the network through the ports.
See
Port Security Interface Configuration on page 203 for information about the settings.
4. Click the Apply button.
5. From the 802.1X Configuration screen, set the Port Based Authentication State and Guest
VLAN Mode to Enable.
For more information about this step, see Port Security Configuration on page 203.
6. Click the Apply button.
This example uses the default values for the port authentication settings, but there are
several additional settings that you can configure. For example, the EAPOL Flood Mode
field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on
the device.
7. From the RADIUS Server Configuration screen, configure a RADIUS server with the
following settings:
• Server Address. 192.168.10.23
• Secret Configured. Yes
• Secret. secret123
• Active. Primary
For more information about this step, see RADIUS Configuration on page 179.
8. Click the Add button.
9. From the Authentication List screen, configure the default List to use RADIUS as the first
authentication method.
For more information about this step, see Authentication List Configuration on page 185.
This example enables 802.1X-based port security on the switch and prompts the hosts
connected on ports g1–g8 for an 802.1X-based authentication. The switch passes the
authentication information to the configured RADIUS server.