Netgear XCM8806 Chassis User Manual - Page 406

NETGEAR 8800 User Manual • Guidelines for Configuring Guest VLANs on page 406 • Creating Guest VLANs on page 407 • Enabling Guest VLANs on page 407 • Modifying the Supplicant Response Timer on page 407 • Disabling Guest VLANs on page 407 • Unconfiguring Guest VLANs on page 407 • Displaying Guest VLAN Settings on page 408 Using Guest VLANs Suppose you have a meeting that includes company employees and visitors from outside the company. In this scenario, your employees have 802.1x enabled supplicants but your visitors do not. By configuring a guest VLAN, when your employees log into the network, they are granted network access (based on their user credentials and 802.1x enabled supplicants). However, when the visitors attempt to log into the network, they are granted limited network access because they do not have 802.1x enabled supplicant. The visitors might be able to reach the Internet, but they are unable to access the corporate network. For example, in Figure 25 Host A has 802.1x capability and Host B does not. When Host A is authenticated, it is given full access to the network. Host B does not have 802.1x capability and therefore does not respond to 802.1x requests from the switch. If port B is configured with the guest VLAN, port B is moved to the guest VLAN. Then Host B will be able to access the Internet but not the corporate network. After Host B is equipped with 802.1x capability, it can be authenticated and allowed to be part of the corporate network. Host B No 802.1x capabilities Host A Has 802.1x capabilities Port B Port A Extreme switch Authentication server Internet Corporate network Figure 25. Guest VLAN for Network Login EW_110 EX_173 Guidelines for Configuring Guest VLANs Keep in mind the following guidelines when configuring guest VLANs: 406 | Chapter 16. Network Login