SNR S2989G-48TX-DC — настройка функций безопасности и VLAN для сетевых устройств [309/553]

SNR S2989G-48TX [309/553] X configuration task list
S2989G-24TX Operation Manual
Chapter 6 Security Function Configuration
6-36
become offline.
Notes: At present, Auto VLAN can only be used in the port-based access control
mode, and on the ports whose link type is Access.
2. Guest VLAN
Guest VLAN feature is used to allow the unauthenticated user to access some
specified resources.
The user authentication port belongs to a default VLAN (Guest VLAN) before passing
the 802.1x authentication, with the right to access the resources within this VLAN without
authentication. But the resources in other networks are beyond reach. Once authenticated,
the port will leave Guest VLAN, and the user can access the resources of other networks.
In Guest VLAN, users can get 802.1x supplicant system software, update supplicant
system or update some other applications (such as anti-virus software, the patches of
operating system). The access device will add the port into Guest VLAN if there is no
supplicant getting authenticated successfully in a certain stretch of time because of
lacking exclusive authentication supplicant system or the version of the supplicant system
being too low.
Once the 802.1x feature is enabled and the Guest VLAN is configured properly, a port
will be added into Guest VLAN, just like Auto VLAN, if there is no response message from
the supplicant system after the device sends more authentication-triggering messages
than the upper limit (EAP-Request/Identity) from the port.
The authentication server assigns an Auto VLAN, and then the port leaves Guest
VLAN and joins the assigned Auto VLAN. When the user becomes offline, the
port will be allocated to the specified Guest VLAN again.
The authentication server assigns an Auto VLAN, and then the port leaves Guest
VLAN and joins the specified VLAN. When the user becomes offline, the port will
be allocated to the specified Guest VLAN again.
6.2.2
802.1x Configuration Task List
802.1x Configuration Task List:
1. Enable IEEE 802.1x function
2. Access management unit property configuration
1) Configure port authentication status
2) Configure access management method for the port: MAC-based or port-based
3) Configure expanded 802.1x function
3. User access devices related property configuration (optional)

Содержание

Узнайте, как настроить функции безопасности и VLAN для управления доступом пользователей. Подробности о Guest VLAN и 802.1x аутентификации.

Скачать