D-Link DGS-6600-48TS Configuration Guide - Page 441

Volume 8-Security & Authentication / Chapter 40-802.1X Authentication 802.1X Configuration Commands Enter the following command to enable and configure the guest VLAN function on an interface: Command dot1x guest-vlan VLAN-ID Explanation Enables and configures the guest VLAN function on the specified interface. In the following example, the user configures Ethernet interface 4.2 to be a member of guest VLAN 2: DGS-6600:2>enable DGS-6600:15#configure terminal DGS-6600:15(config)#interface eth4.2 DGS-6600:15(config-if)#dot1x guest-vlan 2 DGS-6600:15(config-if)#end In the following example, the user removes Ethernet interface 4.2 from guest VLAN 2: DGS-6600:2>enable DGS-6600:15#configure terminal DGS-6600:15(config)#interface eth4.2 DGS-6600:15(config-if)#no dot1x guest-vlan DGS-6600:15(config-if)#end Specifying the Authentication Protocol Typically, 802.1x user access will be authenticated via a remote RADIUS server. For some special purposes, authentication can also be carried out via the local user table on the Switch. When authentication will be carried out by a remote RADIUS server, the 802.1X protocol will forward the request to the RADIUS server that was configured in the AAA module. Enter the following command to specify the 802.1X authentication method that will be used on the ports that are using IEEE 802.1X authentication: Command dot1x auth-protocol {local | radius} Explanation Specifies the 802.1X authentication method that will be used on the ports that are using IEEE 802.1X authentication. In the following example, the user configures the Switch to use the RADIUS authentication method for the ports that are using IEEE 802.1X authentication: DGS-6600:2>enable DGS-6600:15#configure terminal DGS-6600:15(config)#dot1x auth-protocol radius DGS-6600:15(config)#end DGS-6600 Configuration Guide 441