Chapter 6 Tutorials

6.5 How to Set Up a Guest VLAN

All ports on the Switch are in VLAN 1 by default. Say you enable IEEE 802.1x authentication on ports 1 to 8. Clients that connect to these ports should provide the correct user name and password in order to access the ports. You want to assign clients that connect to ports 1, 2 or 3 to a guest VLAN (200 for example) before they can authenticate with the authentication server. In this guest VLAN, clients can surf the Internet through the default gateway attached to port 10, but are not allowed to access other network resources, such as the mail server or local data base.

VLAN 1

Guest VLAN 200

Internet

Ports 1, 2, 3 and 10

 

6.5.1 Creating a Guest VLAN

Follow the steps below to configure port 1, 2, 3 and 10 as a member of VLAN 200.

1Access the web configurator through the Switch’s port which is not in VLAN 200.

 

67

ES3500 Series User’s Guide