GS716Tv2 and GS724Tv3 Software Administration Manual

To configure global 802.1X settings:

1.Select the appropriate radio button in the Port Based Authentication State field to enable or disable 802.1X administrative mode on the switch.

Enable. Port-based authentication is permitted on the switch.

Note: If 802.1X is enabled, authentication is performed by a RADIUS server. This means the primary authentication method must be RADIUS. To set the method, go to Security > Management

Security > Authentication List and select RADIUS as method 1 for

defaultList. For more information, see Authentication List

Configuration on page 159.

Disable. The switch does not check for 802.1X authentication before allowing traffic on any ports, even if the ports are configured to allow only authenticated users.

2.Select the appropriate radio button in the Guest VLAN field to enable or disable the guest VLAN supplicant mode.

Enabled. When no 802.1X supplicant is authenticated on a port, the port still provides limited network access, as determined by a guest VLAN configured on the authentication server.

Disabled. A guest VLAN cannot be used for unauthorized ports.

3.Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.

4.If you change the settings, click Apply to apply the new settings to the system.

Port Authentication

Use the Port Authentication page to enable and configure port access control on one or more ports.

To access the Port Authentication page, click Security > Port Authentication, and then click the Advanced > Port Authentication link.

Note: Use the horizontal scroll bar at the bottom of the browser to view all

the fields on the Port Authentication page. The figures on the following page are both images of the Port Authentication page.

Chapter 5: Managing Device Security 169

Page 169
Image 169
NETGEAR GS724TS-100NAS manual Port Authentication, Configuration on