Dell PowerConnect 5548 User Guide - Page 130

username and password must be entered in lower case and with no delimiting characters (for example: aaccbb55ccff). To use MAC-based authentication at a port: - A Guest VLAN must be defined. - The port must be Guest-VLAN-enabled. - The packets from the first supplicant, at the port before it is authorized, must be untagged. You can configure a port to use Dot1x only, MAC-based only, or Dot1x and MAC-based authentication. If a port is configured to use both Dot1x and MAC-based authentication, a Dot1x supplicant has precedence over a non-Dot1x device. The Dot1x supplicant preempts an authorized, but non-Dot1x device, at a port that is configured with a single session. Unauthenticated VLAN and Guest VLANs Unauthenticated VLANs and Guest VLANs provide access to services that do not require the subscribing devices or ports to be Dot1x or MAC-Based authenticated and authorized. An unauthenticated VLAN is a VLAN that allows access by authorized and unauthorized devices or ports. You can configure one or more VLAN to be unauthenticated in the VLAN Membership pages in "VLANs" on page 459. An unauthenticated VLAN has the following characteristics: • It must be a static VLAN, and cannot be the Guest VLAN or the default VLAN. • The VLAN's member ports must be manually configured as tagged members. • The member ports must be trunk and/or general ports. An access port cannot be member of an unauthenticated VLAN. The Guest VLAN, if configured, is a static VLAN with the following characteristics. • It must be manually defined from an existing, static VLAN. • It is automatically available only to unauthorized devices, or to ports of devices that are connected and Guest VLAN enabled. 130 Dell PowerConnect 55xx Systems User Guide