Netgear FS728TLP Web Management User Guide - Page 158

ProSAFE FS526Tv2, FS726Tv2, and FS728TLP Smart Switches Globally Enable Authentication for Port and Guest VLAN Access You can globally enable port authentication and guest VLAN access. If you leave port authentication disabled, which is the default setting, the smart switch does not check for 802.1X authentication before allowing traffic on any ports, even if the ports are configured to allow only authenticated users. If port authentication and guest VLAN access are enabled and no 802.1X supplicant is authenticated on a port, the port still provides limited network access, as specified by a guest VLAN that is configured on the authentication server. If port authentication is enabled but guest VLAN access is disabled, a guest VLAN cannot be used for unauthorized ports. That is, if no 802.1X supplicant is authenticated on a port, a guest VLAN does not provide access.  To enable port authentication and guest VLAN access: 1. Select Security > Port Authentication > Basic > 802.1X Configuration. The 802.1X Configuration screen displays. 2. Next to Port Based Authentication State, select the Enable radio button. 3. Next to Guest VLAN, select the Enable radio button. 4. Click the Apply button. The settings are saved. Configure Authentication for Individual Ports You can enable and configure port access control settings for individual ports. These settings take effect when port authentication is globally enabled.  To configure the port authentication settings for one or more ports: 1. Select Security > Port Authentication > Advanced > Port Authentication. Manage RADIUS and Port Authentication and Traffic Control 158