Netgear GSM4248P User Manual - Page 553

AV Line of Fully Managed Switches M4250 Series Main User Manual 4. Enter admin as the user name, enter your local device password, and click the Login button. The first time that you log in, no password is required. However, you then must specify a local device password to use each subsequent time that you log in. The System Information page displays. 5. Select Security > Port Authentication > Basic > 802.1X Configuration. The 802.1X Configuration page displays. 6. Select the Dot1x Admin Mode Disable or Enable radio button: • Enabled: 802.1X port-based authentication is globally enabled on the switch. • Disabled: 802.1X port-based authentication is globally disabled on the switch. This is the default setting. The switch does not check for 802.1X authentication before allowing traffic on any ports, even if individual ports are configured to allow only authenticated users. 7. Select the Authentication Admin Mode Disable or Enable radio button: • Enabled: The authentication admin mode is enabled, requiring authentication to be performed by a RADIUS server. This means that the primary authentication method must be RADIUS. To set the method, select Security > Management Security > Authentication List > Authentication List and select Radius as method 1 for defaultList. For more information, see Configure a login authentication list on page 514. • Disabled: The authentication admin mode is disabled, which is the default setting. The switch does not check for 802.1X authentication before allowing traffic on any ports, even if the 802.1X port-based authentication is globally enabled (see the previous step) and the ports are configured to allow only authenticated users. 8. Select the VLAN Assignment Mode Disable or Enable radio button. When enabled, this feature allows a port to be placed into a particular VLAN based on the result of the authentication or type of 802.1X authentication a client uses when it accesses the device. The authentication server can provide information to the device about which VLAN to assign the supplicant. The default is Disable. 9. Select the EAPOL Flood Mode Disable or Enable radio button. This selection specifies whether Extensible Authentication Protocol (EAP) over LAN (EAPoL) flood support is enabled on the switch. The default is Disable. 10. From the Dynamic VLAN Creation Mode menu, select Disable or Enable. If RADIUS-assigned VLANs are enabled, the RADIUS server includes the VLAN ID in the 802.1X tunnel attributes of its response message to the device. If dynamic VLAN creation is enabled on the device and the RADIUS-assigned VLAN does not exist, Manage Switch Security 553 Main User Manual