Zyxel OLT2412 [133/326] Internet

Zyxel OLT2412 [133/326] Internet
Chapter 18 Port Authentication
OLT2412 User’s Guide
133
Figure 38 MAC Authentication Process
18.1.3 Guest VLAN
When 802.1x port authentication is enabled on the OLT and its ports, clients that do not have the
correct credentials are blocked from using the port(s). You can configure your OLT to have one
VLAN that acts as a guest VLAN. If you enable the guest VLAN (102 in the example) on a port (2 in
the example), the user (A in the example) that is not IEEE 802.1x capable or fails to enter the
correct username and password can still access the port, but traffic from the user is forwarded to
the guest VLAN. That is, unauthenticated users can have access to limited network resources in the
same guest VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the
network administrator configures switches or routers with the guest network feature.
Figure 39 Guest VLAN Example
New Connection
Authentication Request
Authentication Reply
1
2
3
Session Granted/Denied
Internet
2
VLAN 100
A
VLAN 102

Содержание