SNR S2989G-24TX-UPS — настройка функций безопасности для коммутаторов уровня 2 и 3 [346/553]

Превью страниц Страница 346 / 553

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-73

Update Server

Radius Server

Internet

PC1 PC2 Printer

Figure 6-25 MAB application

Switch1 is a layer 2 accessing switch, Switch2 is a layer 3 aggregation switch.

Ethernet 1/0/1 is an access port of Switch1, connects to PC1, it enables 802.1x port-

based function and configures guest vlan as vlan8.

Ethernet 1/0/2 is a hybrid port, connects to PC2, native vlan of the port is vlan1, and

configures guest vlan as vlan8, it joins in vlan1, vlan8 and vlan10 with untag method and

enables MAB function.

Ethernet 1/0/3 is an access port, connects to the printer and enables MAB function.

Ethernet 1/0/4 is a trunk port, connects to Switch2.

Ethernet 1/0/4 is a trunk port of Switch2, connects to Switch1.

Ethernet 1/0/1 is an access port, belongs to vlan8, connects to update server to

download and upgrade the client software.

Ethernet 1/0/2 is an access port, belongs to vlan9, connects to radius server which

configure auto vlan as vlan10.

Ethernet 1/0/3 is an access port, belongs to vlan10, connects to external internet

resources.

Eth1/0/1

Eth1/0/2

Eth1/0/3

Switch2

Ethernet1/0/4

Switch1

Eth1/0/1 Eth1/0/2 Eth1/0/3