Netgear XSM4324FS Software Administration Manual Software Version 12.x - Page 383

M4300 Series and M4300-96X Fully Managed Switches Authentication manager (Select the authentication method) Failed Selected Dot1x Failed Selected MAB Failed Selected Captive portal Succeeded Succeeded Port is authorized Succeeded Port is unauthorized Figure 42. Dot1x, MAB, and captive portal authentication method list with default priority In this example, a visiting client attempts to connect to a corporate network in which the authentication manager is enabled. In such a situation, configure the authentication method list in the order dot1x, followed by MAB, and followed by captive portal. If the client is enabled for dot1x but fails to authenticate using dot1x, the authentication manager places the port in the unauthorized state and stops the process. If the client is not enabled for dot1x, the dot1x authentication process times out, and the authentication manager selects the next configured authentication method in the list, which is MAB. Because the client's MAC address is unknown in the corporate network, the MAB authentication process also times out. The authentication manager selects the third configured authentication method in the list, which is captive portal. If the client can provide valid credentials for web authentication, the client is admitted to the network. If the client cannot provide valid credentials, the authentication manager starts a timer for reauthentication because no other authentication method is available in the list. At the expiration of the timer, the authentication manager restarts the authentication process for the first method in the list. The CLI command to enable authentication is as follows. (Netgear Switch)#configure (Netgear Switch)(Config)#authentication enable Security Management 383 Software Administration Manual