TP-Link T2500G-10MPS T2500G-10MPSUN V1 Configuration Guide - Page 665

Configuring Network Security Switch_A#show ip arp inspection interface Port OverSpeed Rate Current Status LAG Gi1/0/1 Enabled 15 N/A Normal N/A Gi1/0/2 Enabled 15 N/A Normal N/A Gi1/0/3 Enabled 15 N/A Normal N/A Gi1/0/4 Disabled 15 N/A N/A N/A ...... 9.2 Example for 802.1X Configuration Examples 9.2.1 Network Requirements The network administrator wants to control access from the end users (clients) in the company. It is required that all clients need to be authenticated separately and that only the authenticated clients can access the Internet. 9.2.2 Configuration Scheme  To authenticate clients separately, enable 802.1X authentication, configure the control mode as auto, and set the control type as MAC based.  Enable 802.1X authentication on the ports connected to clients.  Keep 802.1X authentication disabled on ports connected to the authentication server and the Internet, which ensures unrestricted connections between the switch and the authentication server or the Internet. 9.2.3 Network Topology As shown in the following figure, Switch A acts as the authenticator. Port 1/0/1 is connected to the client, port 1/0/2 is connected to the RADIUS server, and port 1/0/3 is connected to the Internet. Configuration Guide 638