TP-Link T2500G-10MPS T2500G-10MPSUN V1 Configuration Guide - Page 632

Configuring Network Security 802.1X Configuration 192.168.0.100 Switch(config)#show aaa authentication dot1x Methodlist pri1 pri2 pri3 pri4 default radius1 -- -- -- Switch(config)#show aaa accounting dot1x Methodlist pri1 pri2 pri3 pri4 default radius1 -- -- -- Switch(config)#show aaa global AAA global status: Enable Switch(config)#end Switch#copy running-config startup-config 6.2.2 Configuring 802.1X Globally Follow these steps to configure 802.1X globally: Step 1 configure Enter global configuration mode. Step 2 dot1x system-auth-control Enable 802.1X authentication globally. Step 3 dot1x auth-method { pap | eap } Configure the 802.1X authentication method. pap: Specify the authentication method as PAP. If this option is selected, the 802.1X authentication system uses EAP (Extensible Authentication Protocol) packets to exchange information between the switch and the client. The transmission of EAP packets is terminated at the switch and the EAP packets are converted to other protocol (such as RADIUS) packets, and transmitted to the authentication server. eap: Specify the authentication method as EAP. If this option is selected, the 802.1X authentication system uses EAP packets to exchange information between the switch and the client. The EAP packets with authentication data are encapsulated in the advanced protocol (such as RADIUS) packets, and transmitted to the authentication server. Step 4 dot1x guest-vlan vid (Optional) Enable guest VLAN globally. vid: Specify the ID of the VLAN to be configured as the guest VLAN. It must be an existing VLAN with the ID ranging from 2 to 4094. Clients in the guest VLAN can only access resources from specific VLANs. Configuration Guide 605