Home » Netgear Manuals » Hubs & Switches » Netgear M5300-52G3 » Manual Viewer

Netgear M5300-52G3 Web Management User Guide - Page 520

X Example Configuration, From the 802.1X Configuration screen

Add to My Manuals
Save this manual to your list of manuals

Page 520 highlights

ProSafe M5300 Switch 802.1X Example Configuration This example shows how to configure the switch so that 802.1X-based authentication is required on the ports in a corporate conference room (1/0/5 - 1/0/8). These ports are available to visitors and need to be authenticated before granting access to the network. The authentication is handled by an external RADIUS server. When the visitor is successfully authenticated, traffic is automatically assigned to the guest VLAN. This example assumes that a VLAN has been configured with a VLAN ID of 150 and VLAN Name of Guest. 1. From the Port Authentication screen, select ports 1/0/5, 1/0/6, 1/0/7 and 1/0/8. 2. From the Port Control menu, select Unauthorized. The Port Control setting for all other ports where authentication is not needed should Authorized. When the Port Control setting is Authorized, the port is unconditionally put in a force-Authorized state and does not require any authentication. When the Port Control setting is Auto, the authenticator PAE sets the controlled port mode 3. In the Guest VLAN field for ports 1/0/5 - 1/0/8, enter 150 to assign these ports to the guest VLAN. You can configure additional settings to control access to the network through the ports. See Port Security Configuration on page 399 for information about the settings. 4. Click APPLY. 5. From the 802.1X Configuration screen, set the Port Based Authentication State and Guest VLAN Mode to Enable, and then click APPLY (See 802.1X Configuration on page 387). This example uses the default values for the port authentication settings, but there are several additional settings that you can configure. For example, the EAPOL Flood Mode field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on the device. 6. From the RADIUS Server Configuration screen, configure a RADIUS server with the following settings: • Server Address: 192.168.10.23 • Secret Configured: Yes • Secret: secret123 • Active: Primary For more information, see RADIUS on page 359. 7. Click ADD. 8. From the Authentication List screen, configure the default List to use RADIUS as the first authentication method (See Authentication List Configuration on page 366). This example enables 802.1X-based port security on ProSafe and prompts the hosts connected on ports g5-g8 for an 802.1X-based authentication. The switch passes the authentication information to the configured RADIUS server. Configuration Examples 520

Section	Page
ProSafe M5300 Switch	1
Contents	3
1. Getting Started	9
Switch Management Interface	9
Web Access	9
Understanding the User Interfaces	10
Using the Web Interface	10
Interface Naming Convention	17
2. Configuring System Information	19
Management	19
System Information	20
Switch Statistics	24
System CPU Status	26
Slot Information	27
Loopback Interface	29
Network Interface	30
Time	34
DNS	40
SDM Template Preference	42
License	43
License Key	43
License Features	44
Services	45
DHCP Server	45
DHCP Relay	53
DHCP L2 Relay	54
UDP Relay	57
DHCPv6 Server	59
DHCPv6 Relay	66
Stacking	68
Stack Features	68
Firmware Synchronization and Upgrade	69
Configuration Maintenance	69
Stack Master Election	70
Factory Defaults Reset Behavior	70
Nonstop Forwarding	71
Stack Configuration	72
Stack Port Configuration	74
Stack Port Diagnostics	76
Stack Firmware Synchronization	77
NSF	78
Checkpoint Statistics	80
PoE (M5300-28G-POE+ and M5300-52G-POE+ Only)	82
Basic PoE Configuration	83
PoE Port Configuration	84
SNMP	87
SNMPV1/V2	87
SNMP V3 User Configuration	92
LLDP	93
LLDP	93
LLDP-MED	100
ISDP	109
ISDP Global Configuration	109
Advanced ISDP Configuration	110
Timer Schedule	114
Timer Global Configuration	114
Timer Schedule Configuration	115
3. Configuring Switching Information	119
VLANs	119
Basic	120
Advanced	122
Auto-VoIP Configuration	134
Protocol-Based	134
OUI-Based	136
iSCSI	139
Basic	139
Advanced	141
Spanning Tree Protocol	143
Basic	143
Advanced	145
Multicast	156
MFDB	156
IGMP Snooping	158
MLD Snooping	167
MVR Configuration	173
Basic	173
Advanced	174
Address Table	177
Basic	177
Advanced	179
Ports	181
Port Configuration	181
Port Description	182
Link Aggregation Groups	184
LAG Configuration	184
LAG Membership	186
4. Routing	189
Routing Table	189
Basic	190
Advanced	192
IP	193
Basic	193
Advanced	197
IPv6	201
Basic	201
Advanced	204
VLAN	218
VLAN Routing Wizard	218
VLAN Routing Configuration	219
ARP	220
Basic	221
Advanced	221
RIP	225
Basic	225
Advanced	226
OSPF	232
Basic	232
Advanced	233
OSPFv3	257
Basic	257
Advanced	258
Router Discovery	279
Router Discovery Configuration	279
VRRP	280
Basic	280
Advanced	282
Multicast	286
Mroute Table	287
Multicast Global Configuration	288
Multicast Interface Configuration	289
DVMRP	290
IGMP	296
PIM	304
Static Routes Configuration	311
Admin Boundary Configuration	312
IPv6 Multicast	313
Mroute Table	313
IPv6 PIM	314
MLD	321
Static Routes Configuration	329
5. Configuring Quality of Service	331
Class of Service	331
Basic	332
Advanced	333
Differentiated Services	339
DiffServ Wizard	340
Basic	341
Advanced	343
6. Managing Device Security	355
Management Security Settings	355
Local User	356
Enable Password Configuration	358
Line Password Configuration	358
RADIUS	359
Configuring TACACS+	364
Authentication List Configuration	366
Login Sessions	371
Configuring Management Access	372
HTTP	372
HTTPS	373
SSH	377
Telnet	380
Console Port	381
Denial of Service	382
Access Control	384
Port Authentication	386
Basic	387
Advanced	389
Traffic Control	397
MAC Filter	397
Port Security	399
Private Group	404
Protected Ports Configuration	406
Private VLAN	407
Storm Control	412
Control	414
DHCP Snooping	414
IP Source Guard	419
Dynamic ARP Inspection	421
Captive Portal	426
Configuring Access Control Lists	435
ACL Wizard	435
Basic	437
Advanced	441
7. Monitoring the System	457
Ports	457
Port Statistics	458
Port Detailed Statistics	459
EAP Statistics	466
Cable Test	467
Logs	468
Buffered Logs	469
Command Log Configuration	470
Console Log Configuration	471
SysLog Configuration	471
Trap Logs	472
Event Logs	474
Persistent Logs	476
Port Mirroring	477
Multiple Port Mirroring	477
sFlow	479
Basic	479
Advanced	480
8. Maintenance	483
Save Configuration	483
Save Configuration	483
Auto Install Configuration	484
Reset	485
Device Reboot	485
Factory Default	486
Password Reset	486
Upload File From Switch	487
File Upload	487
HTTP File Upload	488
USB File Upload	489
Download File To Switch	490
File Download	490
HTTP File Download	492
USB File Download	494
File Management	495
Copy	495
Dual Image Configuration	496
Troubleshooting	497
Ping IPv4	497
Ping IPv6	498
Traceroute IPv4	499
Traceroute IPv6	500
9. Help	501
Online Help	501
Support	501
User Guide	502
Registration	503
A. Default Settings	505
B. Configuration Examples	509
Virtual Local Area Networks (VLANs)	509
VLAN Example Configuration	510
Access Control Lists (ACLs)	511
MAC ACL Example Configuration	512
Standard IP ACL Example Configuration	513
Differentiated Services (DiffServ)	514
Class	514
DiffServ Traffic Classes	515
Creating Policies	515
DiffServ Example Configuration	517
802.1X	518
802.1X Example Configuration	520
MSTP	521
MSTP Example Configuration	523
C. Notification of Compliance	525

Match case Limit results 1 per page

Configuration Examples

520

ProSafe M5300 Switch

802.1X Example Configuration

This example shows how to configure the switch so that 802.1X-based authentication is

required on the ports in a corporate conference room (1/0/5 - 1/0/8). These ports are

available to visitors and need to be authenticated before granting access to the network. The

authentication is handled by an external RADIUS server. When the visitor is successfully

authenticated, traffic is automatically assigned to the guest VLAN. This example assumes

that a VLAN has been configured with a VLAN ID of 150 and VLAN Name of Guest.

From the Port Authentication screen, select ports 1/0/5, 1/0/6, 1/0/7 and 1/0/8.

From the Port Control menu, select Unauthorized.

The Port Control setting for all other ports where authentication is not needed should

Authorized. When the Port Control setting is Authorized, the port is unconditionally put in

a force-Authorized state and does not require any authentication. When the Port Control

setting is Auto, the authenticator PAE sets the controlled port mode

In the Guest VLAN field for ports 1/0/5 - 1/0/8, enter 150 to assign these ports to the guest

VLAN.

You can configure additional settings to control access to the network through the ports.

See

Port Security Configuration

on page

399 for information about the settings.

Click

APPLY

From the 802.1X Configuration screen, set the Port Based Authentication State and Guest

VLAN Mode to Enable, and then click

APPLY

(See

802.1X Configuration

on page

387).

This example uses the default values for the port authentication settings, but there are

several additional settings that you can configure. For example, the EAPOL Flood Mode

field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on

the device.

From the RADIUS Server Configuration screen, configure a RADIUS server with the

following settings:

•

Server Address: 192.168.10.23

•

Secret Configured: Yes

•

Secret: secret123

•

Active: Primary

For more information, see

RADIUS

on page

359.

Click

ADD

From the Authentication List screen, configure the default List to use RADIUS as the first

authentication method (See

Authentication List Configuration

on page

366).

This example enables 802.1X-based port security on ProSafe and prompts the hosts

connected on ports g5-g8 for an 802.1X-based authentication. The switch passes the

authentication information to the configured RADIUS server.