SNR S2989G-48TX-DC Руководство по Настройке онлайн [313/553] 747287

Превью страниц Страница 313 / 553

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-40

Ethernet1/0/

VLAN2

Ethernet1/0/

SWITCH

Ethernet1/0/6

VLAN5

Internet

Update server Authenticator server

User

Figure 6-13 The Network Topology of Guest VLAN

Notes: in the figures in this session, E2 means Ethernet 1/0/2, E3 means Ethernet

1/0/3 and E6 means Ethernet 1/0/6.

As showed in the next figure, a switch accesses the network using 802.1x

authentication, with a RADIUS server as its authentication server. Ethernet1/0/2, the port

through which the user accesses the switch belongs to VLAN100; the authentication

server is in VLAN2; Update Server, being in VLAN10, is for the user to download and

update supplicant system software; Ethernet1/0/6, the port used by the switch to access

the Internet is in VLAN5.

Figure 6-14 User Joining Guest VLAN

As illustrated in the up figure, on the switch port Ethernet1/0/2, the 802.1x feature is

enabled, and the VLAN10 is set as the port’s Guest VLAN. Before the user gets

authenticated or when the user fails to do so, port Ethernet1/0/2 is added into VLAN10,

allowing the user to access the Update Server.

Update server

Authenticator server

Ethernet1/0/

VLAN2

Ethernet1/0/

SWITCH

Ethernet1/0/6

VLAN5

Internet

User