NETGEAR M4100, M7100 manual CLI Create a Guest Vlan, Enable dot1x and Radius on the switch

ProSafe M4100 and M7100 Managed Switches

CLI: Create a Guest VLAN

1.Enter the following commands:

(Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 2000 (Netgear Switch) (Vlan)#exit

(Netgear Switch) (Config)#interface 1/0/1

(Netgear Switch) (Interface 1/0/1)#vlan participation include 2000 (Netgear Switch) (Interface 1/0/1)#exit

(Netgear Switch) (Config)#interface 1/0/24

(Netgear Switch) (Interface 1/0/24)#vlan participation include 2000 (Netgear Switch) (Interface 1/0/24)#exit

2.Create VLAN 2000, and have 1/0/1 and 1/0/24 as members of VLAN 2000.

(Netgear Switch) (Config)#aaa authentication dot1x default radius (Netgear Switch) (Config)#dot1x system-auth-control

(Netgear Switch) (Config)#radius server host auth 192.168.0.1 (Netgear Switch) (Config)#radius server key auth 192.168.0.1 Enter secret (16 characters max):12345

Re-enter secret:12345

(Netgear Switch) (Config)#interface 1/0/6

(Netgear Switch) (Interface 1/0/6)#dot1x port-control force-authorized (Netgear Switch) (Interface 1/0/6)#exit

(Netgear Switch) (Config)#interface 1/0/12

(Netgear Switch) (Interface 1/0/12)#dot1x port-control force-authorized (Netgear Switch) (Interface 1/0/12)#exit

3.Enable dot1x and RADIUS on the switch.

(Netgear Switch) (Config)#interface 1/0/1

(Netgear Switch) (Interface 1/0/1)#dot1x guest-vlan 2000 (Netgear Switch) (Interface 1/0/1)#exit

(Netgear Switch) (Config)#interface 1/0/24

(Netgear Switch) (Interface 1/0/24)#dot1x guest-vlan 2000 (Netgear Switch) (Interface 1/0/24)#exit

Chapter 15. Security Management 287